CVE-2024-9348 HIGH

CVE-2024-9348: Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view

Vendor Docker
Product Docker Desktop
Weakness CWE-20 · Input validation
Published October 16, 2024
Last update October 17, 2024
View on NVD All CVEs

CVSS base score

8.9/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

What the vulnerability does

01Description

Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view.

Key dates

02Disclosure timeline

October 16, 2024 CVE published
October 17, 2024 Record updated