GHSA-qmmc-jppf-32wvMediumCVSS 6.5

Directory Traversal in Docker

Published
February 15, 2022
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2014-9358 →

📋 Description

Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."

🎯 Affected products1

  • go/github.com/docker/docker:< 1.3.2

🔗 References (7)