Threats Tagged 'ghsa-746p-gqhc-m84c'

Dozzle versions before 11.1.2 contain a path traversal vulnerability in the log download endpoint. The issue arises because container display names are not properly sanitized when building ZIP archive entry names. This allows attackers who can label containers to craft path traversal sequences that write files outside the intended extraction directory when logs are downloaded and extracted.