vulnerability
Docker Desktop: CVE-2023-0628: Improper Neutralization of Special Elements used in a Command
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:L/AC:M/Au:N/C:C/I:P/A:N) | Mar 13, 2023 | Nov 3, 2025 | Nov 3, 2025 |
Severity
5
CVSS
(AV:L/AC:M/Au:N/C:C/I:P/A:N)
Published
Mar 13, 2023
Added
Nov 3, 2025
Modified
Nov 3, 2025
Description
Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL.
Solution
docker-desktop-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.