UpHeron
All vulnerabilities

Servers and applications

CVE-2019-19030

Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030)

Severity
Medium 5.3
Published
17 Jul 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.10.3, 2.0.1
Also known as
GHSA-q9x4-q76f-5h5j
Sources
NVD, Project advisories (GitHub)

Description

Cloud Native Computing Foundation Harbor before 1.10.3 and 2.x before 2.0.1 allows resource enumeration because unauthenticated API calls reveal (via the HTTP status code) whether a resource exists.

Affected software

SoftwareAffected versions
HarborServers and applications · cpe:a:linuxfoundation:harbor
  • Every version before 1.10.3
  • From 2.0.0 before 2.0.1
HarborServers and applications · github:goharbor/harbor
  • Version 1.7.*
  • Version 1.8.*
  • Version 1.9.*
  • Version 2.0.*

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-19030
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-19030
  • GitHub Advisory Database https://github.com/advisories/GHSA-q9x4-q76f-5h5j
  • github.com https://github.com/goharbor/harbor/security/advisories/GHSA-q9x4-q76f-5h5j