Skip to content
OpenAdvisories

Package · Go

github.com/portainer/portainer

11 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 6.0

    Portainer: Missing authorization on custom template file endpoint exposes template content

    Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8 and 2.39.1, a missing authorization vulnerability in …

  • Medium 5.5

    Portainer: Path traversal in backup archive extraction allows arbitrary file write

    Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, Portainer's backup restore feature accepts a .tar.gz…

  • Medium 5.3
    CVE-2024-29296 Public exploit

    Portainer CE allows username enumeration through authentication response timing

    A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not.