Description
Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL.
This issue affects Docker Desktop: before 4.23.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Docker | Docker Desktop | < 4.23.0 | 4.23.0 |
Advisories 1
- WID-SEC-2023-2440 docker: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 25, 2023
References
- https://docs.docker.com/desktop/release-notes/#4230 release-notes