CVE-2023-49346
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Dec 14, 2023
Updated: Dec 20, 2023
CWE ID 377
CWE ID 668
Summary
CVE-2023-49346 is a vulnerability affecting the Budgie Extras WeatherShow applet. The issue allows temporary data exchanged between application components to be accessed or manipulated by any local user. The data, which is stored in a publicly accessible location, can be used to present false information to users or deny access to the application and panel. This weakness poses a significant risk to system security and should be addressed promptly by users and developers.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share