Mirror-registry: quay: quay: server-side request forgery via log export functionality (Red Hat Red Hat Quay 3.10)
En bref
- Source
- NVD
- EPSS
- EPSS 0.40 % · centile 35 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- redhat
- Statut NVD
- Modified
Description
A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift. The log export feature in these products allows an authenticated user to specify an arbitrary callback URL. A backend process then makes server-side HTTP requests to this provided URL. This vulnerability, known as Server-Side Request Forgery (SSRF), could allow an attacker to send requests from the application's internal network, potentially leading to the disclosure of sensitive information.
Faiblesses (CWE)
- CWE-918 — Falsification de requête côté serveur (SSRF)
Références
- https://access.redhat.com/errata/RHSA-2026:19375
- https://access.redhat.com/errata/RHSA-2026:21017
- https://access.redhat.com/errata/RHSA-2026:22629
- https://access.redhat.com/errata/RHSA-2026:22840
- https://access.redhat.com/errata/RHSA-2026:23361
- https://access.redhat.com/errata/RHSA-2026:24853
- https://access.redhat.com/security/cve/CVE-2026-2377
- https://bugzilla.redhat.com/show_bug.cgi?id=2439201
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2377.json
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | redhat |
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | redhat-SADP |
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | NVD · secalert@redhat.com (Secondary) |
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | NVD · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2026-20507
- GCVE · GCVE-0-2026-2377
Configurations affectées (CPE NVD)
cpe:2.3:a:redhat:mirror_registry_for_red_hat_openshift:-:*:*:*:*:*:*:*cpe:2.3:a:redhat:mirror_registry_for_red_hat_openshift:2.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:quay:3.0.0:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Red Hat · Red Hat Quay 3.10 | unaffected 1779822261 < * |
| Red Hat · Red Hat Quay 3.12 | unaffected 1779811412 < * |
| Red Hat · Red Hat Quay 3.14 | unaffected 1779689392 < * |
| Red Hat · Red Hat Quay 3.15 | unaffected 1780891395 < * |
| Red Hat · Red Hat Quay 3.16 | unaffected 1779204086 < * |
| Red Hat · Red Hat Quay 3.9 | unaffected 1779811473 < * |
| Red Hat · mirror registry for Red Hat OpenShift | |
| Red Hat · mirror registry for Red Hat OpenShift 2 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |