CVE-2023-4959: Quay: cross-site request forgery (csrf) on config-editor page
A flaw was found in Quay. Cross-site request forgery (CSRF) attacks force a user to perform unwanted actions in an application. During the pentest, it was detected that the config-editor page is vulnerable to CSRF. The config-editor page is used to configure the Quay instance. By coercing the victim’s browser into sending an attacker-controlled request from another domain, it is possible to reconfigure the Quay instance (including adding users with admin privileges).
Other sources
Cross-Site Request Forgery or CSRF attacks force a user to perform unwanted actions in an application. Through the use of techniques such as social engineering (e.g. sending a link via email), or existing vulnerabilities in the domain itself or others (e.g. XSS), the attacker gets users of the web application to silently execute actions in the context of the user's session. The consequences of exploiting this vulnerability range from compromising the data or operations of a user, to the compromise of the entire web application, if the user has the role of "Administrator". During the pentest, it has been detected that the config-editor page (https://example-registry-quay-config-editor-openshift-operators.apps.automagic.gcp.quaydev.org/) is vulnerable to CSRF. The config-editor page is used to configure the Quay instance.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-4959?
CVE-2023-4959 is a vulnerability in Quay that allows Cross-Site Request Forgery (CSRF) attacks.
What is the severity of CVE-2023-4959?
CVE-2023-4959 has a severity rating of 6.5, which is considered medium.
How does CVE-2023-4959 work?
CVE-2023-4959 allows an attacker to coerce a user into performing unwanted actions on the Quay instance by exploiting the vulnerability in the config-editor page.
Which version of Quay is affected by CVE-2023-4959?
Quay version 3.0.0 is affected by CVE-2023-4959.
How can I fix the vulnerability CVE-2023-4959?
To fix CVE-2023-4959, it is recommended to update Quay to a version that is not affected, if available. Alternatively, you can apply any patches or security updates provided by the vendor.