This vulnerability exists in Red Hat Quay's build API, where an authenticated user with repository write access and the FEATURE_BUILD_SUPPORT feature enabled can supply a malicious URL to trigger SSRF attacks. The Quay builder then makes requests to internal network addresses, which could lead to disclosure of sensitive internal information. The attack complexity is high, and privileges required are low. The vulnerability does not affect availability but impacts confidentiality and integrity at a low level. The vendor advisory recommends disabling the FEATURE_BUILD_SUPPORT feature to mitigate the risk. No official patch or fix is currently confirmed in the advisory.

Successful exploitation allows an authenticated user with repository write access and FEATURE_BUILD_SUPPORT enabled to make the Quay builder send requests to internal network resources. This can lead to unauthorized disclosure of sensitive internal information. The impact on confidentiality and integrity is low, and there is no impact on availability. The attack surface is limited due to the requirement of specific privileges and configuration.

The vendor advisory recommends disabling the FEATURE_BUILD_SUPPORT feature in Red Hat Quay if it is not essential. This prevents exploitation of the vulnerable build API endpoint. Users should refer to Red Hat Quay product documentation for instructions on managing and disabling this feature. No official patch or fix is currently confirmed; patch status is not yet confirmed — check the vendor advisory for current remediation guidance.