https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 22:20:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-260300 EUVD-2026-260300 https://cve.radiocsirt.org/vuln/euvd-2026-260300 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4959 <p>A flaw was found in Quay. Cross-site request forgery (CSRF) attacks force a user to perform unwanted actions in an application. During the pentest, it was detected that the config-editor page is vulnerable to CSRF. The config-editor page is used to configure the Quay instance. By coercing the victim’s browser into sending an attacker-controlled request from another domain, it is possible to reconfigure the Quay instance (including adding users with admin privileges).</p> <p>A flaw was found in Quay. Cross-site request forgery (CSRF) attacks force a user to perform unwanted actions in an application. During the pentest, it was detected that the config-editor page is vulnerable to CSRF. The config-editor page is used to configure the Quay instance. By coercing the victim’s browser into sending an attacker-controlled request from another domain, it is possible to reconfigure the Quay instance (including adding users with admin privileges).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-4959 https://cve.radiocsirt.org/vuln/ghsa-xphq-2g8c-mfh6 <p>A flaw was found in Quay. Cross-site request forgery (CSRF) attacks force a user to perform unwanted actions in an application. During the pentest, it was detected that the config-editor page is vulnerable to CSRF. The config-editor page is used to configure the Quay instance. By coercing the victim’s browser into sending an attacker-controlled request from another domain, it is possible to reconfigure the Quay instance (including adding users with admin privileges).</p> <p>A flaw was found in Quay. Cross-site request forgery (CSRF) attacks force a user to perform unwanted actions in an application. During the pentest, it was detected that the config-editor page is vulnerable to CSRF. The config-editor page is used to configure the Quay instance. By coercing the victim’s browser into sending an attacker-controlled request from another domain, it is possible to reconfigure the Quay instance (including adding users with admin privileges).</p> https://cve.radiocsirt.org/vuln/ghsa-xphq-2g8c-mfh6 https://cve.radiocsirt.org/vuln/gsd-2023-4959 gsd-2023-4959 https://cve.radiocsirt.org/vuln/gsd-2023-4959 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2377 <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Red Hat Quay ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Red Hat Quay ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2377