CVE-2026-2377

A flaw was found in mirror-registry. Authenticated users can exploit the log export feature by providing a specially crafted web address (URL). This allows the application's backend to make arbitrary requests to internal network resources, a vulnerability known as Server-Side Request Forgery (SSRF)....

medium 6.5 CVSS 3.1
Published: Apr 8, 2026
Modified: May 28, 2026
Vendor: Redhat
Product: Mirror Registry For Red Hat Openshift
Versions: 2.0,3.0.0

Description

A flaw was found in mirror-registry. Authenticated users can exploit the log export feature by providing a specially crafted web address (URL). This allows the application's backend to make arbitrary requests to internal network resources, a vulnerability known as Server-Side Request Forgery (SSRF). This could lead to unauthorized access to sensitive information or other internal systems.

References

Related CVEs