CVE-2023-49347

Katalog CVE

CVSS 7.8 · High EPSS 0,31%

Kerentanan Insecure Temporary File pada ubuntubudgie budgie extras. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may read private information from windows, present false information to users, or deny access to the application.

Rincian

Terbit di NVD

14 Desember 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-377: Insecure Temporary File
CWE-668: Exposure of Resource to Wrong Sphere

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 21,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://ubuntu.com/security/notices/USN-6556-1 advisory vendor
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49347 advisory pihak ketiga
• https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-xxfq-fqfp-cpvj advisory pihak ketiga