Beveiligingsadvies

CVE-2026-11569

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-08 10:54:40

Laatst bijgewerkt 2026-06-08 12:15:35

Toegewezen door redhat

CVSS-score 5.4

Status PUBLISHED

Beschrijving

A flaw was found in Quay. The filedrop endpoint accepts any mime type without validation, allowing an authenticated user with repository write access to upload a malicious SVG file containing JavaScript. The file is stored and served inline through the CDN, enabling stored cross-site scripting when a victim visits the archive URL.

← Alle CVE's bekijken Bekijk op cve.org ↗