Threats tagged 'ghsa-mrhc-9wg2-r7rh'

Dokploy versions prior to 0.31.1 have a vulnerability in the readAppMonitoring tRPC procedure that lacks an ownership check. This flaw allows authenticated users to access container metrics of other organizations by specifying arbitrary application names. Attackers can retrieve CPU, memory, network I/O, and block I/O statistics for containers they do not own on self-hosted multi-tenant deployments.