CVE-2020-27831CWE-284

A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email…

published May 26, 2021

CVSS
—
EPSS
1%
Percentile
45.0
In the wild
Unconfirmed
What it is

A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications. This flaw allows an attacker to add email addresses they do not own to repository notifications.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00546 · 45.0th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-05-26T23:46Z
EPSS history
Timeline
  • 26 MAY 23:46Z
    A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email…
    cvelistv5