Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog.
This issue affects Docker Desktop: before 4.12.0.
References
Link | Resource |
---|---|
https://docs.docker.com/desktop/release-notes/#4120 | Release Notes Vendor Advisory |
Configurations
History
25 Sep 2023, 18:19
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://docs.docker.com/desktop/release-notes/#4120 - Release Notes, Vendor Advisory | |
CPE | cpe:2.3:a:docker:docker_desktop:*:*:*:*:*:*:*:* | |
CWE | CWE-94 | |
First Time |
Docker docker Desktop
Docker |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
25 Sep 2023, 16:16
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-09-25 16:15
Updated : 2023-12-10 15:14
NVD link : CVE-2023-0625
Mitre link : CVE-2023-0625
CVE.ORG link : CVE-2023-0625
JSON object : View
Products Affected
docker
- docker_desktop