NetSight
high8.0

CVE-2023-5166

Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL.

Impact

Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL. This issue affects Docker Desktop: before 4.23.0.

Affected products

VendorProductAffected versions
DockerDocker Desktop
before 4.23.0

Weakness classification

References