Dockhand stack environment routes allow path traversal
Anyone logged into the deployment tool can peek at or change password files.
Summary
Dockhand before 1.0.54 lets an authenticated user read, overwrite, and delete .env files outside the stacks root by double-encoding the stack name. This can expose cross-environment secrets or poison deployment variables.
Affected when
- Authenticated user account
What to do
Update to 1.0.54 or later.
Products and platforms
CVE IDs
Sources
- Advisory: github.com (opens in a new tab)
- Write-up: vulncheck.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen