CyberRota Analysis
AI-GeneratedDokploy versions prior to 0.29.13 are vulnerable to command injection through the `cloneGitRepository` function, which allows authenticated users to execute arbitrary operating system commands by manipulating the `customGitUrl` and `customGitBranch` parameters during deployment. This vulnerability poses a high risk, as it can lead to unauthorized access and control over the host system. Organizations using Dokploy should prioritize updating to version 0.29.13 to mitigate this security threat.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, cloneGitRepository in packages/server/src/utils/providers/git.ts interpolates customGitUrl and customGitBranch into a git clone command passed to execAsync or execAsyncRemote, allowing an authenticated user with application access to execute arbitrary operating system commands on the Dokploy host by setting a malicious custom Git URL and triggering deployment. This issue is fixed in version 0.29.13.