CVE-2019-3865CWE-79

A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay

Medium · published June 22, 2020

CVSS v3.0
4.7
EPSS
1%
Percentile
53.3
In the wild
Unconfirmed
What it is

A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay. Attackers are able to use the name field of service key to inject scripts and make it run when admin users try to change the name.

The record
Technical detail
CVSS v3.0
4.7 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00718 · 53.3th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2020-06-22T17:51Z
EPSS history
Timeline
  • 22 JUN 17:51Z
    A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay
    cvelistv5