Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
rakibtg Docker Dashboard before 2021-02-28 allows command injection in backend/utilities/terminal.js via shell metacharacters in the command parameter of an API request. NOTE: this is NOT a Docker, Inc. product.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kazi Mehedi docker-web-gui 操作系统命令注入漏洞
Vulnerability Description
Kazi Mehedi docker-web-gui是 (Kazi Mehedi)开源的一个应用软件。提供一个Docker容器的简单GUI界面 rakibtg Docker Dashboard 存在操作系统命令注入漏洞,该漏洞允许通过API请求的命令参数中的shell元字符在后端工具terminal.js中注入命令。
CVSS Information
N/A
Vulnerability Type
N/A