CVE-2020-13794

low-risk

Published 2020-09-30

Harbor 1.9.* 1.10.* and 2.0.* allows Exposure of Sensitive Information to an Unauthorized Actor.

Do I need to act?

0.20% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.3/10 Medium

NETWORK / LOW complexity

Harbor

Linuxfoundation

Release Notes https://github.com/goharbor/harbor/releases

Exploit https://github.com/goharbor/harbor/security/advisories/GHSA-q9p8-33wc-h432

Exploit https://www.cybereagle.io/blog/cve-2020-13794/

Release Notes https://github.com/goharbor/harbor/releases

Exploit https://github.com/goharbor/harbor/security/advisories/GHSA-q9p8-33wc-h432

Exploit https://www.cybereagle.io/blog/cve-2020-13794/

/ 100

low-risk

Severity 18/34 · Moderate

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal