repo-level mirror accepts external_reference without URL validation
Summary
repo-level mirror accepts external_reference without URL validation. Red Hat rates this important (CVSS 6.8). Weakness: CWE-918.
What this means
In plain English
repo-level mirror accepts external_reference without URL validation. Red Hat rates this important (CVSS 6.8). Weakness: CWE-918. Server-side request forgery can make the affected service initiate requests to systems or endpoints the attacker cannot reach directly.
Recommended action
Vendor mitigation: The POST and PUT handlers in endpoints/api/mirror.py accept an external_reference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validate_external_registry_url(). No fixed release is recorded in the parsed advisory, so treat these controls as temporary until the vendor confirms a patched release.
Rewritten locally from the scraped official advisory data above; no generative API is used. The vendor advisory is authoritative.
Affected versions
No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.
Official advisory · high-confidence parse· fetched 8 hours ago·verify at source
Fixed versions
No fixed release is recorded yet. That does not prove no patch exists — confirm against the vendor advisory.
Official advisory · high-confidence parse· fetched 8 hours ago·verify at source
Mitigation checklist
- The POST and PUT handlers in endpoints/api/mirror.py accept an external_reference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validate_external_registry_url().
Official advisory · high-confidence parse· fetched 8 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.