Red Hat Quay 2.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:quay:2.0.0:*:*:*:*:*:*:*
part: a version: 2.0.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Quay (6cf69209-87e1-5e39-bd62-d49a77f734b2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/jharmison-redhat/redhat_quay |
purl2cpe | 2026-06-01 10:12:53.823107 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-3867 |
vulnerable | 2026-06-08 05:13:56.238131 |
Details available
A vulnerability was found in the Quay web application. Sessions in the Quay web application never expire. An attacker, able to gain access to a session, could use it to control or delete a user's container repository. Red Hat Quay 2 and 3 are vulnerable to this issue.
Published: 2021-03-18T18:04:18.000Z
Updated: 2024-08-04T19:19:18.613Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3865 |
vulnerable | 2026-06-08 05:13:56.231554 |
Details available
MEDIUM (4.7)
A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay. Attackers are able to use the name field of service key to inject scripts and make it run when admin users try to change the name.
Published: 2020-06-22T17:51:19.000Z
Updated: 2024-08-04T19:19:18.608Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.