CVE-2023-49343

MEDIUM

Budgie Extras Dropby - Info Disclosure

Title source: llm

Description

Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel.

References (3)

[Third Party Advisory] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49343

[Third Party Advisory] https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-27g2-7x65-3cc5

[Vendor Advisory] https://ubuntu.com/security/notices/USN-6556-1

Scores

CVSS v3 6.0

EPSS 0.0003

EPSS Percentile 9.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Classification

CWE

CWE-337 CWE-335 CWE-668

Status published

Affected Products (1)

ubuntubudgie/budgie_extras < 1.7.1

Timeline

Published Dec 14, 2023

Tracked Since Feb 18, 2026