CVE-2019-3865

State: Published
Severity: 4.7 Medium
Published: Jun 22, 2020
Updated: Aug 4, 2024
Reserved: Jan 3, 2019

Description

A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay. Attackers are able to use the name field of service key to inject scripts and make it run when admin users try to change the name.

Scores

CVSS	Score	Vector	Source
3.0	4.7 Medium	CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N	redhat

Weaknesses

CWE-79

Affected Products

Product	Versions
quay[UNKNOWN]	quay 2Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3865

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.