Dokploy v0.29.13 Security Patch: RCE/IDOR/SSH Key Leak Fixes

Vulnerability Overview The webpage screenshot displays the release notes for Dokploy version 0.29.13, which include multiple security-related fixes and improvements. The key vulnerabilities addressed are as follows: 1. API Key Length Validation: Prevents 500 errors caused by issues with API key length. 2. Cross-Organization IDOR (Insecure Direct Object References): Fixes an issue where credentials were leaked through cross-organization IDOR vulnerabilities. 3. SSH Private Key Leakage: Fixes an issue where SSH private keys were leaked via the server's read endpoint. 4. OS Command Injection: Fixes multiple OS command injection vulnerabilities across various scenarios, including , , , , , and . 5. Missing Authorization: Fixes missing authorization checks in areas such as WebSocket handlers, owner/admin bypass, and GitHub App setup callbacks. 6. Other Security Improvements: Includes fixes for organization menu cropping, display of correct error messages, and enabling SSO and email verification. Scope of Impact These vulnerabilities may affect users employing Dokploy for container management and deployment, particularly those utilizing features such as Git, Docker, database backup/restore, swarm nodelets, and registry tags. Attackers could exploit these vulnerabilities to perform unauthorized operations, exfiltrate data, or gain control over the system. Remediation 1. API Key Length Validation: Implement validation for API key length to prevent 500 errors associated with length issues. 2. Cross-Organization IDOR: Resolve the credential leakage issue stemming from cross-organization IDOR vulnerabilities. 3. SSH Private Key Leakage: Patch the vulnerability allowing SSH private keys to be exposed via the server read endpoint. 4. OS Command Injection: Address multiple OS command injection flaws to ensure that malicious commands are not executed in scenarios involving , , , , , and . 5. Missing Authorization: Enforce proper authorization checks to prevent unauthorized access in WebSocket handlers, owner/admin bypasses, and GitHub App setup callbacks. 6. Other Security Improvements: Address organization menu cropping, ensure accurate error message display, and enable SSO and email verification features. POC Code or Exploit Code No specific Proof of Concept (POC) code or exploit code was provided on the page. Summary Dokploy version 0.29.13 addresses several critical security vulnerabilities, including API key length validation, cross-organization IDOR, SSH private key leakage, OS command injection, and missing authorization issues. These fixes significantly enhance system security, mitigating the risks of potential attacks and data breaches. Users are strongly advised to upgrade to this version as soon as possible to ensure the security of their systems.

Goal Reached Thanks to every supporter — we hit 100%!

Dokploy v0.29.13 Security Patch: RCE/IDOR/SSH Key Leak Fixes

More from this source