CVE-2023-0628: Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL
Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability CVE-2023-0628?
The vulnerability CVE-2023-0628 is a security flaw in Docker Desktop before version 4.17.0 that allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL.
What is the severity of CVE-2023-0628?
The severity of CVE-2023-0628 is high, with a CVSS score of 7.8.
How can an attacker exploit CVE-2023-0628?
An attacker can exploit CVE-2023-0628 by tricking a user into opening a crafted malicious docker-desktop:// URL, allowing them to execute arbitrary commands inside a Dev Environments container during initialization.
What is the affected software for CVE-2023-0628?
The affected software for CVE-2023-0628 is Docker Desktop before version 4.17.0.
How can I fix the vulnerability CVE-2023-0628?
To fix the vulnerability CVE-2023-0628, users should update Docker Desktop to version 4.17.0 or newer.