Skip to content
OpenAdvisories

Vendor

amir20

7 known vulnerabilities.

Products

dozzle 7
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-102332

    Dozzle before 11.1.2 Path Traversal via Log ZIP Download

    Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint. Attackers who can label containers can use path traversal sequences to write files outside the extraction directory when…

    amir20 dozzle
  • Medium 4.3
    CVE-2026-62286

    Dozzle label filters do not restrict container event and statistics streams

    Dozzle is a realtime log viewer for docker containers. Prior to 10.6.7, streamEvents in internal/web/events.go applies a restricted user's label filter to container lists but not to the container-stat and container-event channels returned by GET /api/events/s…

    amir20 dozzle github.com/amir20/dozzle Go
  • Medium 4.8
    CVE-2024-47182

    Dozzle uses unsafe hash for passwords

    Dozzle is a realtime log viewer for docker containers. Before version 8.5.3, the app uses sha-256 as the hash for passwords, which leaves users susceptible to rainbow table attacks. The app switches to bcrypt, a more appropriate hash for passwords, in version…

    amir20 dozzle github.com/amir20/dozzle Go