CyberRota Analysis
AI-GeneratedThe vulnerability affects Dozzle, a real-time log viewer for Docker containers, specifically versions 10.5.2 to 10.6.15, where the isBlockedIP SSRF guard fails to properly inspect certain IPv4 addresses embedded in IPv6 formats. This oversight allows authenticated users to access loopback or link-local targets that should be restricted, potentially leading to unauthorized access to sensitive internal resources. Organizations using affected versions of Dozzle should prioritize updating to version 10.6.15 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SSRF guard in internal/notification/dispatcher/webhook.go, used by safeDialContext for webhook notification URLs, does not inspect IPv4 addresses embedded in 6to4, NAT64, Teredo, or IPv4-compatible IPv6 addresses, allowing an authenticated user to reach loopback or link-local targets that the guard intends to block. This issue is fixed in version 10.6.15.