What’s Vulnerable › Vulnerabilities

CVE-2018-8728

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-03-15 · updated 2026-06-17
• Weakness: CWE-79

Description

server/app/views/static/code.html in Kontena before 1.5.0 allows XSS in "kontena master login --remote" code display, as demonstrated by /code#code= in a URI.

Affected products

• Kontena: before 1.5.0 — fixed in 1.5.0

How to fix

Upgrade to a fixed version: Kontena 1.5.0. Check the vendor advisory for mitigations.

References

• https://github.com/kontena/kontena/pull/3223
• https://github.com/kontena/kontena/releases/tag/v1.5.0
• https://lgtm.com/projects/g/kontena/kontena/rev/06a7a06e65a5ef0dada14faee2ae20388b87c1fe
• https://github.com/kontena/kontena/pull/3223
• https://github.com/kontena/kontena/releases/tag/v1.5.0
• https://lgtm.com/projects/g/kontena/kontena/rev/06a7a06e65a5ef0dada14faee2ae20388b87c1fe

Get alerted when CVE-2018-8728 or the next vulnerability affects your stack