Moderate: Red Hat Security Advisory: Red Hat Quay v3.3.3 bug fix and security update

Red Hat Quay v3.3.3 is now available with bug fixes and security updates. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2020-27832

A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting XSS vulnerability when displaying a repository's notification. This flaw allows an attacker to trick a user into performing a malicious action to impersonate the target user. The highest threat from this vulnerabilit...

CVE-2020-27831

A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications. This flaw allows an attacker to add email addresses they do not own to repository notifications. Mitigation Disable email using the...

Red Hat Quay Cross-Site Scripting Vulnerability

Red Hat Quay is a distributed container image repository from Red Hat USA that is used to build, distribute and deploy containers. A cross-site scripting vulnerability exists in versions prior to quay 3.3.3 that stems from persistent XSS in the repository notification display...

Red Hat Quay Access Control Error Vulnerability

Red Hat Quay is a distributed container image repository from Red Hat, Inc. that is used to build, distribute and deploy containers. An access control error vulnerability exists in Red Hat Quay versions prior to 3.3.3, which stems from an email notification authorization bypass...

CVE-2019-9511

A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a...

Moderate: Red Hat Security Advisory: Red Hat Quay v3.3.1 security update

An update is now available for Red Hat Quay 3.3 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

CVE-2020-14313

An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot accounts and the existence of private repositories within any namespace...

CVE-2020-14313

An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot accounts and the existence of private repositories within any namespace...

Information disclosure

An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot accounts and the existence of private repositories within any namespace...

CVE-2020-14313

CVE-2020-14313 affects Red Hat Quay prior to 3.3.1. A crafted build trigger in a repository allows disclosure of robot account names and the existence of private repositories within any namespace (information disclosure). The Red Hat advisory RHSA-2020:3525 confirms a security update in Quay 3.3....

CVE-2020-14313

An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot accounts and the existence of private repositories within any namespace...

PT-2020-13969

Name of the Vulnerable Software and Affected Versions Red Hat Quay versions prior to 3.3.1 Description An information disclosure issue was found in Red Hat Quay. This flaw allows an attacker who can create a build trigger in a repository to disclose the names of robot accounts and the existence o...

CVE-2020-14313: Undefined Security Weakness

An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot accounts and the existence of private repositories within any namespace...

Red Hat Quay Information Disclosure Vulnerability

Red Hat Quay is a distributed container image repository from Red Hat, Inc. that is used to build, distribute and deploy containers. An information disclosure vulnerability exists in Red Hat Quay. The vulnerability stems from errors such as configuration during operation of a networked system or...

CVE-2020-14313

An information disclosure vulnerability was found in Red Hat Quay. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot accounts and the existence of private repositories within any namespace...

Red Hat Quay Cross-Site Scripting Vulnerability

Red Hat Quay is a distributed container image repository from Red Hat, Inc. that is used to build, distribute and deploy containers. A cross-site scripting vulnerability exists in Red Hat Quay version 2. The vulnerability can be exploited by an attacker to inject and run scripts with the help of...

CVE-2019-3865

A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay. Attackers are able to use the name field of service key to inject scripts and make it run when admin users try to change the name...

CVE-2019-3865

A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay. Attackers are able to use the name field of service key to inject scripts and make it run when admin users try to change the name...

Cross site scripting

A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay. Attackers are able to use the name field of service key to inject scripts and make it run when admin users try to change the name...