CVE-2023-0626

Name of the Vulnerable Software and Affected Versions Docker Desktop versions prior to 4.12.0

Description The issue is related to incorrect code generation management in Docker Desktop, allowing a remote attacker to execute arbitrary code via query parameters in the message-box route. This can lead to remote code execution (RCE).

Recommendations For Docker Desktop versions prior to 4.12.0, update to version 4.12.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the message-box route to minimize the risk of exploitation. Avoid using query parameters in the message-box route until the issue is resolved.