github.com/portainer/portainer vulnerabilities (Go)
11 vulnerabilities.
-
github.com/portainer/portainerGo Portainer: Unauthenticated Restore Endpoint Allows Admin Takeover on Uninitialised Portainer Instances 7.1 High -
github.com/portainer/portainerGo Portainer: Missing authorization on custom template file endpoint exposes template content 6.0 Medium -
github.com/portainer/portainerGo Portainer: JWT accepted in URL query leaks tokens to logs and referers 7.7 High -
github.com/portainer/portainerGo Portainer: Endpoint security bypass via Swarm service create/update 9.4 Critical -
github.com/portainer/portainerGo Portainer: Kubernetes middleware continues after token validation failure, bypassing endpoint authorization 8.1 High -
github.com/portainer/portainerGo Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update 8.5 High -
github.com/portainer/portainerGo Portainer: Bind-mount restriction bypass via HostConfig.Mounts 8.5 High -
github.com/portainer/portainerGo Portainer: Path traversal in backup archive extraction allows arbitrary file write 5.5 Medium -
github.com/portainer/portainerGo Portainer: Missing authorization on Docker plugin endpoints allows host RCE 9.4 Critical -
github.com/portainer/portainerGo Portainer improperly uses an encryption algorithm in the AesEncrypt function 7.5 High -
github.com/portainer/portainerGo Portainer CE allows username enumeration through authentication response timing 5.3 Medium