CVE-2023-49346: ubuntubudgie budgie extras

csirt@kutim:~/threat-intel/cve/CVE-2023-49346

CVSS 7.8 · High EPSS 0,30%

Kerentanan Insecure Temporary File pada ubuntubudgie budgie extras. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Temporary data passed between application components by Budgie Extras WeatherShow applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel.

Rincian

Terbit di NVD: 14 Desember 2023
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-377: Insecure Temporary File
CWE-668: Exposure of Resource to Wrong Sphere
EPSS (30 hari): 0,30% peluang dieksploitasi; lebih tinggi dari 21,4% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
ubuntubudgie	budgie extras	Versi 1.4.0 hingga sebelum 1.7.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://ubuntu.com/security/notices/USN-6556-1 advisory vendor
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49346 advisory pihak ketiga
https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-rffw-gg7p-5688 advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.