CVE-2024-9348

Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view.

Score

CVSS 4.0 8.9 High

Status

Deferred - security@docker.com

Published

2024-10-16

Last modified

2024-10-17

Weaknesses

CWE-116, CWE-20

Affected products

• Desktop (Docker)
• Docker Desktop (Docker)

References

• https://docs.docker.com/desktop/release-notes/#4343