Red Hat Mirror-Registry Server-Side Request Forgery Vulnerability via Open Redirect

A server-side request forgery (SSRF) vulnerability has been identified in Red Hat Mirror-Registry. This issue allows authenticated users to manipulate the application into accessing unintended internal or restricted systems by providing malicious web addresses. The application processes these addresses by automatically following redirects without verifying the final destination, enabling attackers to route requests to systems they should not have access to.

Impact

Exploitation of this vulnerability could lead to server-side request forgery, where the application is tricked into making HTTP requests to arbitrary destinations. This could potentially be used to access internal services or systems that are normally restricted.