CVE-2026-45298 Scanner

Dozzle is a real-time log viewer specifically designed for the output of container logs. It is commonly used by developers and system administrators to track logs directly from the Docker interface, offering a straightforward and efficient way to manage logs. Its primary purpose is to enhance productivity by simplifying the access and monitoring of real-time log data.

The Server-Side-Request-Forgery (SSRF) vulnerability allows an attacker to induce the server-side application to make unintended requests to external or internal resources. SSRF can be exploited to send arbitrary HTTP requests from the vulnerable application and intercept server responses, potentially exposing sensitive data or services. Attackers can use SSRF to bypass network controls or exploit trust relationships inside the internal network.

This vulnerability involves a weakness in the Dozzle application where an unauthenticated endpoint allows injecting attacker-controlled URLs, redirecting server requests to malicious destinations. The flaw is specifically tied to the POST `/api/notifications/test-webhook` endpoint, creating a gateway for SSRF attacks. The vulnerable parameter in the payload is the "url" field that an attacker can manipulate. Successful exploitation does not require user interaction or authentication, enhancing its risk potential.

When this vulnerability is exploited, attackers might gain unauthorized access to internal services or sensitive data exposed by the server's responses. This could lead to data breaches, network reconnaissance, and further entry points for additional attacks. IT infrastructure may be jeopardized as attackers may access metadata or other sensitive configurations usually shielded by network security measures.

REFERENCES

• https://github.com/amir20/dozzle/security/advisories/GHSA-3v9w-6365-9w54
• https://nvd.nist.gov/vuln/detail/CVE-2026-45298