CVEvulnerability
CVE-2023-49347
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-12-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-377, CWE-668
Description
Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may read private information from windows, present false information to users, or deny access to the application.
Affected configurations
• ubuntubudgie budgie extras (>= 1.4.0 < 1.7.1)
Related
Weakness · not in database (1)
Weakness · CWE (1)
- CWE-668 Exposure of Resource to Wrong Sphere weakness
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49347 Third Party Advisory
- https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-xxfq-fqfp-cpvj Third Party Advisory
- https://ubuntu.com/security/notices/USN-6556-1 Vendor Advisory
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49347 Third Party Advisory
- https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-xxfq-fqfp-cpvj Third Party Advisory
- https://ubuntu.com/security/notices/USN-6556-1 Vendor Advisory