CVE-2020-27832

published 2021-05-27

CVE-2020-27832: A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository's notification. This flaw…

critical 9 CVSS 3.1

AV N AC L PR L UI R S C C H I H A H

A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository's notification. This flaw allows an attacker to trick a user into performing a malicious action to impersonate the target user. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
redhat	quay	—	—
redhat	quay	>= 3.0.0 < 3.3.2	3.3.2

CWE-79