Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2021-23732

Arbitrary Code Execution

Description

This affects all versions of package docker-cli-js. If the command parameter of the Docker.command method can at least be partially controlled by a user, they will be in a position to execute any arbitrary OS commands on the host system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a docker-cli-js

  • 0 to < unspecifiedaffected

References