critical9.1
CVE-2024-33661
Portainer before 2.20.0 allows redirects when the target is not index.yaml.
Impact
Portainer before 2.20.0 allows redirects when the target is not index.yaml.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Portainer | Portainer | before 2.20.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/portainer/portainer/compare/2.19.4...2.20.0
- https://github.com/portainer/portainer/pull/11233
- https://github.com/portainer/portainer/pull/11236
- https://www.portainer.io/
- https://github.com/portainer/portainer/compare/2.19.4...2.20.0
- https://github.com/portainer/portainer/pull/11233
- https://github.com/portainer/portainer/pull/11236
- https://www.portainer.io/