Amir20 Dozzle vulnerabilities
- amir20 dozzle Dozzle before 11.1.2 Path Traversal via Log ZIP Download 4.6 Medium
- amir20 dozzle Dozzle label filters do not restrict container event and statistics streams 4.3 Medium
- amir20 dozzle Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher 2.3 Low
- amir20 dozzle Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy) 8.6 High
- amir20 dozzle Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypasses authentication 8.7 High
- amir20 dozzle Dozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access 8.7 High
- amir20 dozzle Dozzle uses unsafe hash for passwords 4.8 Medium