CyberRota Analysis
AI-GeneratedA critical path traversal vulnerability exists in Dokploy versions up to 0.29.7, specifically in the writeTraefikConfigInPath function of the application.ts file. This flaw allows remote attackers to manipulate file paths, potentially leading to unauthorized access to sensitive files on the server. Organizations using affected versions should prioritize patching this vulnerability immediately, as exploits are publicly available.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the file packages/server/src/utils/traefik/application.ts of the component Settings. The manipulation of the argument path results in path traversal. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.