CVE-2024-9348
UNKNOWN
Published 2024-10-16T14:50:06.031Z
Actions:
Expert Analysis
Professional remediation guidance
Get tailored security recommendations from our analyst team for CVE-2024-9348. We'll provide specific mitigation strategies based on your environment and risk profile.
No CVSS data available
Description
Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view.
Available Exploits
No exploits available for this CVE.
Related News
No news articles found for this CVE.
EU Vulnerability Database
Monitored by ENISA for EU cybersecurity
ENISA Analysis
Malicious code in bioql (PyPI)
Affected Products (ENISA)
docker
docker desktop
ENISA Scoring
CVSS Score (4.0)
8.9
/10
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS Score
0.190
probability
ENISA References
Data provided by ENISA EU Vulnerability Database. Last updated: October 3, 2025
GitHub Security Advisories
Community-driven vulnerability intelligence from GitHub
⚠ Unreviewed
HIGH
GHSA-x6x8-x7qh-52jw
Advisory Details
Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view.
CVSS Scoring
CVSS Score
7.5
CVSS Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Advisory provided by GitHub Security Advisory Database. Published: October 16, 2024, Modified: October 16, 2024
Published: 2024-10-16T14:50:06.031Z
Last Modified: 2024-10-17T13:30:08.548Z
Copied to clipboard!