CVE-2018-8728: Kontena

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

server/app/views/static/code.html in Kontena before 1.5.0 allows XSS in "kontena master login --remote" code display, as demonstrated by /code#code= in a URI.

Affected products

• Kontena Kontena: before 1.5.0 (fixed in 1.5.0)

Published 2018-03-15. Last modified 2026-06-17.