CVE-2023-49345

HIGH Year: 2023
CVSS v3 Score
7.8
High
Weakness Type
CWE-377
View all →

Vulnerability Description

Temporary data passed between application components by Budgie Extras Takeabreak applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel.

Related Vulnerabilities

CVE-2018-3710

HIGH
CVSS:7.8(High)

Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execution.

CWE-3772018

CVE-2020-1981

HIGH
CVSS:7.8(High)

A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed the restricted shell to execute commands as a low privileged...

CWE-3772020

CVE-2022-34387

HIGH
CVSS:7.8(High)

Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain a privilege escalation vulnerability. A local authenticated malicious us...

CWE-3772022

CVE-2022-4817

HIGH
CVSS:7.8(High)

A vulnerability was found in centic9 jgit-cookbook. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to insecure temporary file. The attack can be i...

CWE-3772022

CVE-2023-49342

HIGH
CVSS:7.8(High)

Temporary data passed between application components by Budgie Extras Clockworks applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who ...

CWE-3772023

CVE-2023-49344

HIGH
CVSS:7.8(High)

Temporary data passed between application components by Budgie Extras Window Shuffler applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user...

CWE-3772023