CVE-2022-37708

This repository provides a detailed technical analysis of CVE-2022-37708, a Docker vulnerability involving UID/GID mapping and file descriptor exposure. It explains the root cause, demonstrates the exploit via a step-by-step example, and includes a proof-of-concept script for detecting open file descriptors.

This repository provides a detailed technical analysis of CVE-2022-37708, explaining how Docker's handling of UID/GID mappings between host and container systems can lead to unauthorized file access. It includes a step-by-step walkthrough of the exploit mechanism, prerequisites, and a proof-of-concept demonstration using a Dockerized application.