Not rated
CVE-2020-27832 A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a…
Description
A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository's notification. This flaw allows an attacker to trick a user into performing a malicious action to impersonate the target user. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| quay | Versions not published |
Other CVEs of quay
The 4 CVEs of quay →
CVE-2020-27831
A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email…
Not rated
CVE-2019-3867
A vulnerability was found in the Quay web application
Not rated
CVE-2020-14313
An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1
Not rated