Skip to content
OpenAdvisories

Package · Go

github.com/docker/cli

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.0

    Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

    Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (docker-compose.exe, docker-build…