CVE-2018-12678: Server-Side Request Forgery (SSRF)

Portainer before 1.18.0 supports unauthenticated requests to the websocket endpoint with an unvalidated id query parameter for the /websocket/exec endpoint, which allows remote attackers to bypass intended access restrictions or conduct SSRF attacks...

PT-2018-11327

Name of the Vulnerable Software and Affected Versions Portainer versions prior to 1.18.0 Description The issue allows remote attackers to bypass intended access restrictions or conduct SSRF attacks due to unauthenticated requests to the websocket endpoint with an unvalidated id query parameter fo...

Uber: [data-07.uberinternal.com] SSRF in Portainer app lead to access to Internal Docker API without Auth

Vulnerability description not provided...