Skip to content
OpenAdvisories

Package · Go

github.com/play-with-docker/play-with-docker

1 known vulnerabilities.

1 result · Feed

  • Medium 6.5

    Play With Docker vulnerable to Authorization Bypass Through User-Controlled Key

    Play With Docker is a browser-based Docker playground. Versions 0.0.2 and prior are vulnerable to domain hijacking. Because CORS configuration was not correct, an attacker could use `play-with-docker.com` as an example and set the origin header in an http req…