VYPR
← All advisories
Medium severity4.3NVD Advisory· Published May 27, 2021· Updated Jun 17, 2026

CVE-2020-27831

CVE-2020-27831

Description

A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications. This flaw allows an attacker to add email addresses they do not own to repository notifications.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Red Hat/Quay2 versions
    cpe:2.3:a:redhat:quay:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:redhat:quay:*:*:*:*:*:*:*:*range: >=3.0.0,<3.3.3
    • (no CPE)
  • Red Hat/Quaydescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.