CVE-2023-4956

CVE-2023-4956 is a clickjacking vulnerability affecting Red Hat Quay, specifically within its config-editor page. An attacker could exploit this by overlaying malicious content, tricking an administrator into inadvertently clicking buttons and potentially reconfiguring parts of the Quay instance. This vulnerability has a CVSS score of 4.3 (Medium), indicating a network-based attack with low complexity but requiring user interaction. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.