CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2024-47182
High (7.5) in amirraminfar dozzle. EPSS 0.2% chance of exploitation in the next 30 days. Fixed in github.com/amir20/dozzle 8.5.3.
Dozzle is a realtime log viewer for docker containers. Before version 8.5.3, the app uses sha-256 as the hash for passwords, which leaves users susceptible to rainbow table attacks. The app switches to bcrypt, a more appropriate hash for passwords, in version 8.5.3.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-326, CWE-328
- Published
- Modified
- Record from
- the NVD, synced
Affected
- amirraminfar:dozzle
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-w7qr-q9fh-fj35 | Go | github.com/amir20/dozzle | <8.5.3 | 8.5.3 |
| GO-2024-3163 | Go | github.com/amir20/dozzle | all versions | no fix published |