Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/08/10 6:56 p.m.33 views

CVE-2026-72873 Dokploy: Cross-tenant Git provider secrets are disclosed to low-privileged service readers via `application.one`

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, application.one in apps/dokploy/server/api/routers/application.ts returns provider relations loaded by findApplicationById in packages/server/src/services/application.ts without redacting githubClientSecret,...

6.5CVSS0.00332EPSS
SaveExploits0References4
Rows per page
Query Builder