CVE-2024-33661

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-33661
Portainer before 2.20.0 allows redirects when the target is not index.yaml.
CVSS

No CVSS.

References
Link Resource
https://github.com/portainer/portainer/compare/2.19.4...2.20.0 Product
https://github.com/portainer/portainer/compare/2.19.4...2.20.0 Product
https://github.com/portainer/portainer/pull/11233 Patch
https://github.com/portainer/portainer/pull/11233 Patch
https://github.com/portainer/portainer/pull/11236 Patch
https://github.com/portainer/portainer/pull/11236 Patch
https://www.portainer.io/ Product
https://www.portainer.io/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:portainer:portainer:*:*:*:*:*:*:*:*
History

21 May 2025, 18:07

Type Values Removed Values Added
First Time Portainer
Portainer portainer
CPE cpe:2.3:a:portainer:portainer:*:*:*:*:*:*:*:*
References () https://github.com/portainer/portainer/pull/11236 - () https://github.com/portainer/portainer/pull/11236 - Patch
References () https://github.com/portainer/portainer/compare/2.19.4...2.20.0 - () https://github.com/portainer/portainer/compare/2.19.4...2.20.0 - Product
References () https://www.portainer.io/ - () https://www.portainer.io/ - Product
References () https://github.com/portainer/portainer/pull/11233 - () https://github.com/portainer/portainer/pull/11233 - Patch

26 Apr 2024, 00:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-26 00:15

Updated : 2025-05-21 18:07

NVD link : CVE-2024-33661

Mitre link : CVE-2024-33661

JSON object : View

Products Affected

portainer

  • portainer
CWE

No CWE.