CVE-2023-49346

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Dec 14, 2023
Updated: Dec 20, 2023
CWE ID 377
CWE ID 668

Summary

CVE-2023-49346 is a vulnerability affecting the Budgie Extras WeatherShow applet. The issue allows temporary data exchanged between application components to be accessed or manipulated by any local user. The data, which is stored in a publicly accessible location, can be used to present false information to users or deny access to the application and panel. This weakness poses a significant risk to system security and should be addressed promptly by users and developers.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share