CyberRota Analysis
AI-GeneratedThe Dokploy platform prior to version 0.29.13 is vulnerable due to an unauthenticated API endpoint that improperly trusts user-supplied organizationId and userId values, allowing attackers to inject malicious GitHub App providers with sensitive credentials. This could lead to unauthorized access and compromise of GitHub integrations for affected organizations. Organizations using Dokploy should prioritize updating to version 0.29.13 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the unauthenticated /api/providers/github/setup route in apps/dokploy/pages/api/providers/github/setup.ts trusts gh_init organizationId and userId values from the state parameter and calls createGithub in packages/server/src/services/github.ts, allowing an attacker to insert a GitHub App provider containing client_secret, webhook_secret, and PEM private key material into another organization. This issue is fixed in version 0.29.13.