CVE-2024-5891

A vulnerability was found in Quay. If an attacker can obtain the client ID for an application, they can use an OAuth token to authenticate despite not having access to the organization from which the application was created. This issue is limited to authentication and not authorization. However, in configurations where endpoints rely only on authentication, a user may authenticate to applications they otherwise have no access to.

• CWE-1390

• https://access.redhat.com/security/cve/CVE-2024-5891Broken Link
• https://bugzilla.redhat.com/show_bug.cgi?id=2283879Issue Tracking, Permissions Required
• https://access.redhat.com/security/cve/CVE-2024-5891Broken Link
• https://bugzilla.redhat.com/show_bug.cgi?id=2283879Issue Tracking, Permissions Required

Published

Jun 12, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-5885stangirard/quivr version 0.0.236 contains a Server-Side Requ…8.6
• CVE-2024-5886Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-5887Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-5888There is a stored Cross-site Scripting vulnerability in ArcG…4.8
• CVE-2024-5889The Events Manager – Calendar, Bookings, Tickets, and more! …6.1
• CVE-2024-5890ServiceNow has addressed an HTML injection vulnerability tha…5.1
• CVE-2024-5892The Divi Torque Lite – Divi Theme and Extra Theme plugin for…6.4
• CVE-2024-5893A vulnerability classified as critical has been found in Sou…9.8
• CVE-2024-5894A vulnerability classified as critical was found in SourceCo…9.8
• CVE-2024-5895A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-5896A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-5897A vulnerability has been found in SourceCodester Employee an…6.1