Threats tagged 'ghsa-5jph-mp6v-5c49'

Dokploy versions from 0.28.0 up to but not including 0.31.1 contain a path traversal vulnerability. This flaw allows authenticated organization members with read access to a service to list files and directories of any git repository by providing an arbitrary repository path. As a result, attackers can enumerate file and directory names belonging to other tenants' applications and reconstruct source trees on the host or managed servers.