Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of hosts accessible on the Harbor server's intranet.
| Software | From | Fixed in |
|---|---|---|
| linuxfoundation / harbor | - | 2.0.1 |
github.com/goharbor/harbor
|
1.8.0 | 2.0.1 |