https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T23:36:20.154999+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-4959 CVE-2023-4959 — Quay: cross-site request forgery (csrf) on config-editor page 2026-10-12T23:36:20.156388+00:00

Affected: Red Hat Quay 3

A flaw was found in Quay. Cross-site request forgery (CSRF) attacks force a user to perform unwanted actions in an application. During the pentest, it was detected that the config-editor page is vulnerable to CSRF. The config-editor page is used to configure the Quay instance. By coercing the victim’s browser into sending an attacker-controlled request from another domain, it is possible to reconfigure the Quay instance (including adding users with admin privileges).