Description (CNA)
Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases. An authenticated attacker can read any file that the Traefik process user can access (e.g., /etc/passwd, application source, environment variable files containing credentials and secrets). This may lead to full compromise of other services or lateral movement. This vulnerability is fixed in 0.23.7.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Dokploy / dokploy | affected < 0.23.7 |
CWE
CWE-22
References
- https://github.com/Dokploy/dokploy/security/advisories/GHSA-vq94-qm94-mxp6
- https://github.com/Dokploy/dokploy/commit/e42f6bc61050cd438726921fced64477cbf8f8e6
ADP enrichment
No English description supplied.
No references supplied.