Vulnerabilities

Filters

1 selected

7 records

Sort

Vendor: amir20 Clear all filters

TI-2026-65354 CVE-2026-102332 · GHSA-746p-gqhc-m84c

Dozzle before 11.1.2 Path Traversal via Log ZIP Download

LOW 21

Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint.

CVSS 4.0MEDIUM 4.6 Network No auth User interaction EPSS 0.00324 Published 2026-09-28 Fixed in 11.1.2 CWE-22

TI-2026-44477 CVE-2026-62286 · GHSA-xcw9-qmmf-vqxj

Dozzle label filters do not restrict container event and statistics streams

MEDIUM 53

Dozzle is a realtime log viewer for docker containers.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00425 Published 2026-09-24 Fixed in 10.6.7, 1.29.1-0.20260622172006-19c01e0fb491 CWE-200

TI-2026-51294 CVE-2026-73087 · GHSA-p2w3-6x73-2f6x

Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher

MEDIUM 45

Dozzle is a realtime log viewer for docker containers.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00465 Published 2026-08-11 Fixed in 10.6.15, 1.29.1-0.20260804193351-8cf7ccd5ee04 CWE-918

TI-2026-33098 CVE-2026-45298 · GHSA-3v9w-6365-9w54

Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)

HIGH 76

Dozzle is a realtime log viewer for docker containers.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01491 Published 2026-05-26 Fixed in 10.5.2 CWE-918

TI-2026-32844 CVE-2026-44985 · GHSA-j643-x8pv-8m67

Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypasses authentication

HIGH 73

Dozzle is a realtime log viewer for docker containers.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00209 Published 2026-05-26 Fixed in 10.5.2 CWE-346

TI-2026-19945 CVE-2026-24740 · GHSA-m855-r557-5rc5

Dozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access

HIGH 79

Dozzle is a realtime log viewer for docker containers.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00419 Published 2026-01-27 Fixed in 9.0.3, 1.29.1-0.20260125230338-620e59aa2463 CWE-284

TI-2024-31549 CVE-2024-47182 · GHSA-w7qr-q9fh-fj35

Dozzle uses unsafe hash for passwords

LOW 32

Dozzle is a realtime log viewer for docker containers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00208 Published 2024-09-27 Fixed in 8.5.3 CWE-328