Advisories · Technology
mirror registry for Red Hat OpenShift 2.
Every CVE that names mirror registry for Red Hat OpenShift 2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable
- mirror registry for Red Hat OpenShift
- mirror registry for Red Hat OpenShift 2
- Server-side request forgery (SSRF)
- CVSS 6.8 Medium
Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation
- Red Hat Quay 3.10
- Red Hat Quay 3.12
- Server-side request forgery (SSRF)
- CVSS 5.2 Medium
Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration
- Red Hat Quay 3.10
- Red Hat Quay 3.12
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Mirror-registry: openshift mirror registry: user enumeration via authentication error messages
- mirror registry for Red Hat OpenShift
- mirror registry for Red Hat OpenShift 2
- Information disclosure
- CVSS 6.5 Medium
Mirror-registry: quay: quay: server-side request forgery via log export functionality
- Red Hat Quay 3.10
- Red Hat Quay 3.12
- Server-side request forgery (SSRF)
- CVSS 4.9 Medium
Mirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interface
- mirror registry for Red Hat OpenShift
- mirror registry for Red Hat OpenShift 2
- Open redirect