CVE-2024-3625

Name of the Vulnerable Software and Affected Versions: Quay (affected versions not specified)

Description: A flaw in Quay's storage of its database in plain text within the mirror-registry on Jinja's config.yaml file poses a risk. This issue could allow a malicious actor with access to this file to gain unauthorized access to Quay's Redis instance. The vulnerability is related to the unencrypted storage of critical information in the config.yaml file of the Jinja templating engine, which could enable a remote attacker to exploit the vulnerability and gain access to Quay's Redis instance.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.