PT-2023-5444
CVE-2023-0625
·
تاريخ النشر
2023-09-25
·
تاريخ التحديث
2023-09-26
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Docker Desktop versions prior to 4.12.0
Description
The issue is related to incorrect code generation management, which can be exploited by a remote attacker to execute arbitrary code. This can be achieved via a crafted extension description or changelog.
Recommendations
For Docker Desktop versions prior to 4.12.0, update to version 4.12.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted extension descriptions or changelogs until a patch is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾