quay 3 Schwachstellen (CVE)

Für quay 3 veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse
6.5Mittel
CVE-2025-4374

Quay: incorrect privilege assignment

Project Quay quay; Red Hat Red Hat Quay 3

A flaw was found in Quay. When an organization acts as a proxy cache, and a user or robot pulls an image that hasn't been mirrored yet, they are granted "Admin" permissions on the newly created repository.

5.4Mittel
CVE-2023-3384

Quay: stored cross site scripting

Red Hat Red Hat Quay 3

A flaw was found in the Quay registry. While the image labels created through Quay undergo validation both in the UI and backend by applying a regex (validation.py), the same validation is not performed when the label comes from an image. This flaw allows an…