Code injection

2023-09-2516:15:00

PRIOn knowledge base

www.prio-n.com

docker desktop

code injection

access token theft

vulnerability

extension icon url

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.3%

Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL.

This issue affects Docker Desktop: before 4.23.0.

CPENameOperatorVersion
docker_desktoplt4.23.0

CPE	Name	Operator	Version
	docker_desktop	lt	4.23.0

References

docs.docker.com/desktop/release-notes/