CVE-2023-49343 is a high-severity vulnerability affecting the Budgie Extras Dropby applet in Ubuntu Budgie, where temporary data passed between application components can be viewed or manipulated. This is due to data being stored in a world-readable location, allowing local attackers to pre-create or control this file to present false information or deny application access. With a CVSS score of 7.8, it carries a high impact on confidentiality, integrity, and availability, but requires local access and low privileges. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= v1.4.0, < v1.7.1CPE match | cpe:2.3:a:ubuntubudgie:budgie_extras:*:*:*:*:*:*:*:* | ||
>= 1.4.0, < 1.7.1CPE matchmatch criteria | cpe:2.3:a:ubuntubudgie:budgie_extras:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.