A flaw was found in Red Hat Quay's notification webhook feature. The Slack and generic webhook notification handlers accept user-supplied URLs without SSRF validation, allowing a repository administrator to make the Quay worker issue POST requests to internal network addresses or cloud infrastructure endpoints that should not be reachable from the application.
Exploitability
AV:NAC:LPR:HUI:NScope
S:CImpact
C:LI:LA:N5.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:NInput Validation