Vulnerabilities > CVE-2025-4374

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
CWE-266
NVD
Published: 2025-05-06
Updated: 2025-05-06

Summary

A flaw was found in Quay. When an organization acts as a proxy cache, and a user or robot pulls an image that hasn't been mirrored yet, they are granted "Admin" permissions on the newly created repository.

Common Weakness Enumeration (CWE)

References