Vulnerabilities > Redhat > Quay > 3.3.1

DATE CVE VULNERABILITY TITLE RISK
2021-05-27 CVE-2020-27832 Cross-site Scripting vulnerability in Redhat Quay
A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository's notification.
network
redhat CWE-79
6.0
2021-05-27 CVE-2020-27831 Insufficiently Protected Credentials vulnerability in Redhat Quay
A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications.
network
low complexity
redhat CWE-522
4.3