Dokploy v0.31.0 password change yields host RCE via backtick
A member changing a database password can reach host command execution; the researcher live-tested the official v0.31.0 image.
58
A member changing a database password can reach host command execution; the researcher live-tested the official v0.31.0 image.
CERT/CC details an OS command injection in Dokploy letting authenticated users execute commands as root; patched in 0.29.13.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views