Advisories · Technology
Red Hat Quay 3.9.
Every CVE that names Red Hat Quay 3.9 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Quay: quay: global read-only superuser can view robot account tokens
- Red Hat Quay 3.10
- Red Hat Quay 3.12
- Broken access control
- CVSS 6.8 Medium
Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation
- Red Hat Quay 3.10
- Red Hat Quay 3.12
- Server-side request forgery (SSRF)
- CVSS 5.2 Medium
Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration
- Red Hat Quay 3.10
- Red Hat Quay 3.12
- Server-side request forgery (SSRF)
- CVSS 7.1 High
Mirror-registry: remote code execution using pickle deserialization
- mirror registry for Red Hat OpenShift 2.0
- Red Hat Quay 3.10
- Insecure deserialization
- CVSS 7.4 High
Mirror-registry: quay: insecure direct object reference in blobupload
- mirror registry for Red Hat OpenShift 2.0
- Red Hat Quay 3.10
- Broken access control
- CVSS 6.5 Medium
Mirror-registry: quay: quay: server-side request forgery via log export functionality
- Red Hat Quay 3.10
- Red Hat Quay 3.12
- Server-side request forgery (SSRF)