Affected by GO-2022-0704 and 8 other vulnerabilities

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0781: Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

registry

package

v1.8.6 Latest Latest Go to latest Published: Nov 15, 2019 License: Apache-2.0 Imports: 17 Imported by: 32

Details

This section is empty.

This section is empty.

This section is empty.

type NotificationHandler struct {
	api.BaseController
}

NotificationHandler handles request on /service/notifications/, which listens to registry's events.

func (n *NotificationHandler) Post()

Post handles POST request, and records audit log or refreshes cache based on event.

func (n *NotificationHandler) Prepare()

Prepare turns off xsrf check for notification handler

func (n *NotificationHandler) Render() error

Render returns nil as it won't render any template.