CVE-2020-27832

2021-05-2713:50:39

CWE-79

redhat

www.cve.org

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.1%

JSON

A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository’s notification. This flaw allows an attacker to trick a user into performing a malicious action to impersonate the target user. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CNA Affected

[
  {
    "product": "quay",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "quay 3.3.2"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1905784