CVE

CVE-2024-33661

Date: (C)2024-04-26   (M)2024-04-29

Portainer before 2.20.0 allows redirects when the target is not index.yaml.

Reference:

https://github.com/portainer/portainer/compare/2.19.4...2.20.0

https://github.com/portainer/portainer/pull/11233

https://github.com/portainer/portainer/pull/11236

https://www.portainer.io/