Vulnerabilidades de Amir20
CVEs publicadas que afetam produtos de Amir20: 3 registro(s), com severidade, exploração e correções.
CVE-2026-45298
Alta · 8.6
Exploit público CWE-918 26/05/2026
Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)
Dozzle is a realtime log viewer for docker containers. Prior to 10.5.2, in a default dozzle deploy (the documented quickstart, no DOZZLE_AUTH_PROVIDER set), POST /api/notifications/test-webhook is reachable without authentication and forwards an attacker-controlled URL into a WebhookDispatcher that sends an HTTP POST to the supplied URL with attacker-controlled request headers, and returns the response status code AND up to 1MB of the response body to the caller, when the target replies non-2xx. This vulnerability is fixed in 10.5.2.
CVE-2026-44985
Crítica · 9.6
CWE-346 26/05/2026
Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypasses authentication
Dozzle is a realtime log viewer for docker containers. Prior to 10.5.2, he WebSocket upgrader for the /exec and /attach endpoints uses CheckOrigin: func(r *http.Request) bool { return true }, accepting upgrade requests from any origin. Combined with the JWT cookie using SameSite: Lax, this enables Cross-Site WebSocket Hijacking (CSWSH). An attacker hosting a page on a same-site origin (e.g., a sibling subdomain, or another service on localhost) can initiate a WebSocket connection to the exec endpoint that carries the victim's valid JWT cookie, gaining interactive shell access in any container the victim is authorized to access. This vulnerability is fixed in 10.5.2.
CVE-2026-24740
Crítica · 9.9
CWE-863 27/01/2026
Autorização incorreta nos endpoints de shell do agente do Dozzle
Dozzle é um visualizador de logs em tempo real para contêineres Docker. Antes da versão 9.0.3, uma falha nos endpoints de shell com suporte de agente do Dozzle permite que um usuário restrito por filtros de rótulo (por exemplo, `label=env=dev`) obtenha um shell root interativo em contêineres fora do escopo (por exemplo, `env=prod`) no mesmo host do agente, ao direcionar diretamente os IDs desses contêineres. A versão 9.0.3 contém uma correção para o problema.