Description
Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog.
This issue affects Docker Desktop: before 4.12.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Docker | Docker Desktop | < 4.12.0 | 4.12.0 |
Advisories 1
- WID-SEC-2023-2443 docker: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 25, 2023
References
- https://docs.docker.com/desktop/release-notes/#4120 release-notes