CVE-2026-102332— Dozzle before 11.1.2 Path Traversal via Log ZIP Download
Quick assessment
Affected
amir20 dozzle
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Dozzle 在 11.1.2 之前的版本中，在通过日志下载端点构建 ZIP 归档条目名称时，未能对容器显示名称进行安全过滤。攻击者若能对容器进行标签命名，便可以利用路径遍历序列，在用户下载并解压日志时，将文件写入解压目录之外。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1083 · File and Directory Discovery
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-102332
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Dozzle before 11.1.2 Path Traversal via Log ZIP Download
Source: CVE Program / CVE List V5
Vulnerability Description
Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint. Attackers who can label containers can use path traversal sequences to write files outside the extraction directory when users download and extract logs.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-102332
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-102332
请登录查看更多情报信息。
Other References for CVE-2026-102332 (7)
-
https://github.com/amir20/dozzle/blob/v11.1.1/internal/web/download.go#L141-L146 technical-description
-
-
https://github.com/amir20/dozzle product
-
https://github.com/amir20/dozzle/releases/tag/v11.1.2 release-notes
IV. Related Vulnerabilities
Same product: dozzle
-
CVE-2026-62286
Dozzle label filters do not restrict container event and sta -
CVE-2026-73087
Dozzle: SSRF guard bypass via IPv6 transition addresses (6to -
CVE-2026-45298
Dozzle: Pre-auth SSRF with response-body reflection via POST -
CVE-2026-44985
Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attac -
CVE-2026-24740
Dozzle Agent Label-Based Access Control Bypass Allows Unauth
Same vendor: amir20
-
CVE-2026-62286
Dozzle label filters do not restrict container event and sta -
CVE-2026-73087
Dozzle: SSRF guard bypass via IPv6 transition addresses (6to -
CVE-2026-45298
Dozzle: Pre-auth SSRF with response-body reflection via POST -
CVE-2026-44985
Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attac -
CVE-2026-24740
Dozzle Agent Label-Based Access Control Bypass Allows Unauth
Same weakness: CWE-22
-
CVE-2024-58386
ZoneMinder 1.37.x Path Traversal via files view -
CVE-2026-101142
Eleveo Quality Management Questionnaire Audio Upload Scoreca -
CVE-2026-101132
DeepSeek deepseek-harness Bundle Patch profile.ts loadProfil -
CVE-2026-55156
Token Optimizer MCP: Unauthenticated Path Traversal in Dashb -
CVE-2026-54708
Authenticated Remote Code Execution via Path Traversal in Fr
V. Comments for CVE-2026-102332
No comments yet