CVE-2023-0626: Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route
Published Sep 25, 2023
·Updated
Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route.
This issue affects Docker Desktop: before 4.12.0.
Affected Software
1 affected component
Docker Docker Desktop<4.12.0
Remediation
Information
Update to 4.12.0
Event History
Sep 25, 2023
CVE Published
via MITRE·03:31 PM
Data Sourced
via MITRE·03:31 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this Docker Desktop vulnerability?
The vulnerability ID is CVE-2023-0626.
2
What is the severity level of CVE-2023-0626?
The severity level of CVE-2023-0626 is critical (9.8).
3
How does CVE-2023-0626 affect Docker Desktop?
CVE-2023-0626 allows for remote code execution (RCE) via query parameters in the message-box route in Docker Desktop before version 4.12.0.
4
How can I fix the CVE-2023-0626 vulnerability in Docker Desktop?
To fix the CVE-2023-0626 vulnerability, you should upgrade Docker Desktop to version 4.12.0 or newer.
5
Where can I find more information about the CVE-2023-0626 vulnerability?
You can find more information about the CVE-2023-0626 vulnerability in the Docker Desktop release notes.