CVE-2026-45627 : 詳細

CVE-2026-45627

8.2
/
高
0.04%V4
2026-05-29
18h17 +00:00
Cross-site Scripting
A03-Injection
Network
2026-10-26
13h10 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.0, the unauthenticated GET /api/app-images/logo endpoint reflects a user-supplied color query parameter into the body of an SVG document via strings.ReplaceAll with no escaping. The substitution lands inside a