Non notée
CVE-2020-27832 A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a…
Description
A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository's notification. This flaw allows an attacker to trick a user into performing a malicious action to impersonate the target user. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| quay | Versions non publiées |
Autres CVE de quay
Les 4 CVE de quay →
CVE-2020-27831
A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email…
Non notée
CVE-2019-3867
A vulnerability was found in the Quay web application
Non notée
CVE-2020-14313
An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1
Non notée