CVE-2024-33661

2024-04-2500:00:00

mitre

github.com

portainer security vulnerability

unauthorized redirects

AI Score

7.2

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

Portainer before 2.20.0 allows redirects when the target is not index.yaml.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:portainer:portainer:*:*:*:*:*:*:*:*"
    ],
    "vendor": "portainer",
    "product": "portainer",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.20.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]