11 matches found
Use of GET Request Method With Sensitive Query Strings
Overview Affected versions of this package are vulnerable to Use of GET Request Method With Sensitive Query Strings in the extractBearerToken process. An attacker can gain unauthorized access to user accounts and perform actions with the privileges of the compromised user by obtaining a JWT token...
EUVD-2020-16999
Malware in sbrugna...
CVE-2025-49593
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Prior to STS version 2.31.0 and LTS version 2.27.7, if a Portainer administrator can be convinced to register a maliciou...
CVE-2025-49593 Portainer HTTP Headers May Leak to Malicious Container Registries
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Prior to STS version 2.31.0 and LTS version 2.27.7, if a Portainer administrator can be convinced to register a maliciou...
CVE-2025-49593 Portainer HTTP Headers May Leak to Malicious Container Registries
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Prior to STS version 2.31.0 and LTS version 2.27.7, if a Portainer administrator can be convinced to register a maliciou...
CVE-2024-33661
Portainer versions prior to 2.20.0 are vulnerable to an Open Redirect vulnerability (CWE-601). The root cause is the improper validation of user-supplied URLs, which allows an attacker to redirect users to arbitrary web pages other than index.yaml . This flaw is associated with Server-Side Reques...
CVE-2024-33661
Portainer before 2.20.0 allows redirects when the target is not index.yaml...
Improper access control
Portainer before 1.22.1 has Incorrect Access Control issue 1 of 4...
CVE-2019-16878
Portainer before 1.22.1 has XSS issue 2 of 2...