Threats tagged 'ghsa-9hvx-vhh3-2359'

A vulnerability in Red Hat Quay allows an authenticated repository administrator to access notification configurations of other repositories by knowing or guessing the notification UUID. This includes sensitive information such as webhook URLs, Slack tokens, and email addresses. The flaw also permits triggering test notifications for other repositories. Exploitation requires knowledge of a specific 128-bit UUID, which limits attack likelihood. No official fix or mitigation currently meets Red Hat's criteria for deployment.