CVE-2021-41874

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Code injection

DISPUTED An unauthorized access vulnerabiitly exists in all versions of Portainer, which could let a malicious user obtain sensitive information. NOTE: Portainer has received no detail of this CVE report. There is also no response after multiple attempts of contacting the original source...

编号撤回

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. Portainer suffers from a privilege permission and access control issue vulnerability that can be exploited by an attacker to obtain sensitive information...

CVE-2021-41874

...

CVE-2021-41874

CVE-2021-41874 is rejected/not used; this CVE entry does not represent an active vulnerability.

编号撤回

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. Portainer suffers from a privilege permission and access control issue vulnerability that can be exploited by an attacker to obtain sensitive information...

PT-2021-23445 · Portainer · Portainer

Name of the Vulnerable Software and Affected Versions: Portainer affected versions not specified Description: An unauthorized access issue exists in Portainer, which could allow a malicious user to obtain sensitive information. There is no detailed information available about this issue, as the...

Cross-site Scripting (XSS)

github.com/portainer/portainer is vulnerable to cross-site scripting. The vulnerability exists due to the lack of validation of input via the node input box in Custom Templates...

CVE-2021-42650

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

CVE-2021-42650

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

CVE-2021-42650

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

CVE-2021-42650

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

CVE-2021-42650

Portainer contains an XSS vulnerability in Custom Templates via the node input box that affects versions before 2.9.1. The CVSS2/3.1 scores indicate MEDIUM risk with network access and no authentication required, but user interaction is not required under CVSSv2 and is required under CVSSv3.1, wi...

Portainer 跨站脚本漏洞

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. Portainer suffers from a cross-site scripting vulnerability that stems from a cross-site scripting XSS vulnerability in the node input box in custom templates prior to Portainer version 2.9.1...

Unauthorized Access Vulnerability in Portainer

Portainer is a graphical management tool for visualizing container images. With Portainer you can easily build, manage and maintain Docker environments. An unauthorized access vulnerability exists in Portainer. An attacker could exploit the vulnerability to obtain sensitive information...

Privilege Escalation

github.com/portainer/portainer is vulnerable to privilege escalation. The vulnerability exists due to an insecure permissions in the isValidStackFile function allowing non-admin user to spawn new containers critical capabilities such as SYSMODULE, which can be used to take over the Docker host...

Portainer Insecure Privilege Vulnerability

Portainer is an open source lightweight management UI that allows you to easily manage docker hosts or clusters. An insecure privilege vulnerability exists in Portainer 1.24.1 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...

CVE-2020-24263

Portainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead to remote arbitrary code execution. A non-admin user is allowed to spawn new containers with critical capabilities such as SYSMODULE, which can be used to take over the Docker host...

CVE-2020-24263

Portainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead to remote arbitrary code execution. A non-admin user is allowed to spawn new containers with critical capabilities such as SYSMODULE, which can be used to take over the Docker host...