Lucene search
DockerVULNRICHMENT:CVE-2023-0626HistorySep 25, 2023 - 3:31 p.m.
CVE-2023-0626 Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route
2023-09-2515:31:38
CWE-94
Docker
github.com
cve-2023-0626
docker desktop
vulnerability
rce
query parameters
message-box route
CVSS3
8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
AI Score
6.9
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route.
This issue affects Docker Desktop: before 4.12.0.
Related
cvelist
cvelist
cve
cve
CVE-2023-0626
2023-09-25 16:15:13
prion
prion
Design/Logic Flaw
2023-09-25 16:15:00
nvd
nvd
CVE-2023-0626
2023-09-25 16:15:13
CVSS3
8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
AI Score
6.9
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Related for VULNRICHMENT:CVE-2023-0626