Red Hat Security Advisory

RHSA-2021:0050

Red Hat Quay v3.3.3 bug fix and security update

Released 2021-01-11 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Quay v3 quay/quay-container-security-rhel8-operator, quay/quay-container-security-rhel8-operator-metadata, quay/quay-openshift-bridge-rhel8-operator +3

Fixes 2 records

TI-2020-16903 CVE-2020-27832 · GHSA-2xp8-j5vh-vcrw

Cross-site scripting in quay

MEDIUM 41

A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository's notification.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.0091 Published 2021-05-27 Fixed CWE-79

TI-2020-16902 CVE-2020-27831 · GHSA-3mxm-3qx9-6gq2

Improper access control in quay

LOW 21

A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00546 Published 2021-05-26 Fixed CWE-284