The mirror-registry doesn’t properly sanitize the host header in HTTP requests, which allows attackers to perform malicious redirects to their own domains or conduct phishing campaigns. This vulnerability poses a medium risk due to its potential for exploitation without user interaction. Proper handling of HTTP headers is crucial to prevent such attacks.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-7777 |
Exploitation
To exploit this vulnerability, an attacker can craft a malicious HTTP request with a specially formatted host header. By redirecting users to a controlled domain, the attacker can execute phishing campaigns or other malicious activities without requiring any user interaction.
Affected Products
- Mirror Registry: Affected due to improper sanitization of the host header, leading to potential redirection attacks.
Mitigation
To mitigate this vulnerability, it is essential to implement proper validation and sanitization of HTTP headers in the mirror-registry. Regular updates and patches from Red Hat should be applied to ensure that the system is protected against such vulnerabilities.