2 matches found
CVE-2026-72872
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, application.saveBitbucketProvider stores bitbucketOwner and bitbucketRepository without validation and cloneBitbucketRepository in packages/server/src/utils/providers/bitbucket.ts interpolates those values into git clo...
9.9CVSS0.00372EPSS
SaveExploits0References4
CVE-2026-72872 Dokploy: OS Command Injection via Bitbucket `owner`/`repository` in `git clone`
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, application.saveBitbucketProvider stores bitbucketOwner and bitbucketRepository without validation and cloneBitbucketRepository in packages/server/src/utils/providers/bitbucket.ts interpolates those values into git clo...
9.9CVSS5.8AI score
SaveExploits0References6
20