Threats tagged 'ghsa-cxc6-5mg7-78wq'

A critical SQL injection vulnerability in Red Hat Quay allows authenticated attackers to bypass tenant isolation in multi-tenant deployments. By creating a namespace with an underscore character, attackers exploit SQL LIKE pattern matching to access robot account tokens from other tenants. These stolen tokens enable unauthorized read, push, or overwrite operations on container images, risking container supply chain integrity especially in OpenShift environments. Red Hat has released fixed versions and already patched Quay.io. Workarounds include restricting namespace creation and rotating tokens but do not fully mitigate the flaw.