CVE-2024-9348CWE-20

Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view

High · published October 16, 2024

CVSS v4.0
8.9
EPSS
0%
Percentile
39.8
In the wild
Unconfirmed
What it is

Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view.

The record
Technical detail
CVSS v4.0
8.9 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00471 · 39.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-10-16T14:50Z
EPSS history
Timeline
  • 16 OCT 14:50Z
    Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view
    cvelistv5