GHSA-2c4x-699h-vw5xMediumCVSS 6.5

A flaw was found in mirror-registry. Authenticated users can exploit the log export feature by...

Published
April 8, 2026
Last Modified
May 20, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw was found in mirror-registry. Authenticated users can exploit the log export feature by providing a specially crafted web address (URL). This allows the application's backend to make arbitrary requests to internal network resources, a vulnerability known as Server-Side Request Forgery (SSRF). This could lead to unauthorized access to sensitive information or other internal systems.

🔗 References (5)