CVE-2023-0625

Name of the Vulnerable Software and Affected Versions Docker Desktop versions prior to 4.12.0

Description The issue is related to incorrect code generation management, which can be exploited by a remote attacker to execute arbitrary code. This can be achieved via a crafted extension description or changelog.

Recommendations For Docker Desktop versions prior to 4.12.0, update to version 4.12.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted extension descriptions or changelogs until a patch is applied.