CVE-2026-2377
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Apr 08, 2026
Vendor
unknown
Description
A flaw was found in mirror-registry. Authenticated users can exploit the log export feature by providing a specially crafted web address (URL). This allows the application's backend to make arbitrary requests to internal network resources, a vulnerability known as Server-Side Request Forgery (SSRF). This could lead to unauthorized access to sensitive information or other internal systems.