CVE-2023-0628

No fix known EPSS <1%CVSS 6.1

Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL.

Published 2023-03-13 · CVE record · OSV

Products: Docker Inc. Docker Desktop