CVE-2023-3384

Summary

CVE-2023-3384 reveals a vulnerability in Quay registry where image labels created through the UI and backend undergo validation. However, the same validation does not apply to labels coming from images. This issue enables attackers to publish malicious images with embedded scripts, leading to Cross-site scripting (XSS) attacks when the images are executed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.