Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route.
This issue affects Docker Desktop: before 4.12.0.
References
Link | Resource |
---|---|
https://docs.docker.com/desktop/release-notes/#4120 | Release Notes Vendor Advisory |
https://docs.docker.com/desktop/release-notes/#4120 | Release Notes Vendor Advisory |
Configurations
History
21 Nov 2024, 07:37
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-09-25 16:15
Updated : 2024-11-21 07:37
NVD link : CVE-2023-0626
Mitre link : CVE-2023-0626
CVE.ORG link : CVE-2023-0626
JSON object : View
Products Affected
docker
- docker_desktop
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')