CVE-2023-20902

CVE-2023-20902 is a timing condition vulnerability affecting Harbor versions 2.6.x and below, 2.7.2 and below, 2.8.2 and below, and 1.10.17 and below. An unauthenticated attacker with network access can exploit this flaw to create or stop job tasks and retrieve job task information. Rated Medium severity (CVSS 6.5), it has a network attack vector and high attack complexity, potentially leading to high confidentiality impact and low integrity impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.