Beveiligingsadvies

CVE-2025-4374

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-06 14:49:28
Laatst bijgewerkt 2026-08-07 13:38:41
Toegewezen door redhat
CVSS-score 6.5
Status PUBLISHED

Beschrijving

A flaw was found in Quay. When an organization acts as a proxy cache, and a user or robot pulls an image that hasn't been mirrored yet, they are granted "Admin" permissions on the newly created repository.