https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T22:20:42.196118+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-260300 EUVD-2026-260300 2026-10-12T22:20:42.199191+00:00 EUVD-2026-260300 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4959 fkie_cve-2023-4959 2026-10-12T22:20:42.199219+00:00

A flaw was found in Quay. Cross-site request forgery (CSRF) attacks force a user to perform unwanted actions in an application. During the pentest, it was detected that the config-editor page is vulnerable to CSRF. The config-editor page is used to configure the Quay instance. By coercing the victim’s browser into sending an attacker-controlled request from another domain, it is possible to reconfigure the Quay instance (including adding users with admin privileges).

 https://cve.radiocsirt.org/vuln/ghsa-xphq-2g8c-mfh6 GHSA-xphq-2g8c-mfh6 2026-10-12T22:20:42.199252+00:00

A flaw was found in Quay. Cross-site request forgery (CSRF) attacks force a user to perform unwanted actions in an application. During the pentest, it was detected that the config-editor page is vulnerable to CSRF. The config-editor page is used to configure the Quay instance. By coercing the victim’s browser into sending an attacker-controlled request from another domain, it is possible to reconfigure the Quay instance (including adding users with admin privileges).

 https://cve.radiocsirt.org/vuln/gsd-2023-4959 gsd-2023-4959 2026-10-12T22:20:42.199272+00:00 gsd-2023-4959 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2377 WID-SEC-W-2023-2377 — Red Hat Quay: Mehrere Schwachstellen 2026-10-12T22:20:42.199283+00:00

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Red Hat Quay ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder Cross-Site-Scripting-Angriffe durchzuführen.