{
  "cveId": "CVE-2023-49346",
  "url": "https://patchblox.com/security/cve/CVE-2023-49346",
  "summary": "CVE-2023-49346 is fixed in 29 products on 1 platform, first by budgie-app-launcher-applet 1.4.0-1ubuntu3.1, released December 13, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "budgie-extras: Temporary data passed between application components by Budgie Extras WeatherShow applet could potentially be viewed...",
  "description": "Temporary data passed between application components by Budgie Extras WeatherShow applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel.",
  "published": "2023-12-13T16:00:00Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00303,
  "epssPercentile": 0.23265,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "budgie-app-launcher-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-app-launcher-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-app-launcher-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-applications-menu-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-applications-menu-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-applications-menu-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-brightness-controller-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-brightness-controller-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-brightness-controller-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-clockworks-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-clockworks-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-clockworks-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-countdown-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-countdown-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-countdown-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-dropby-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-dropby-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-dropby-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-extras",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1.7.1-1",
      "fix": "DEBIAN-CVE-2023-49346",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-49346",
      "released": "2023-12-14T22:15:43Z"
    },
    {
      "platform": "linux",
      "product": "budgie-extras",
      "release": "Debian 14",
      "fixedVersion": "1.7.1-1",
      "fix": "DEBIAN-CVE-2023-49346",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-49346",
      "released": "2023-12-14T22:15:43Z"
    },
    {
      "platform": "linux",
      "product": "budgie-extras-common",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-extras-common 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-extras-common-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-extras-daemon",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-extras-daemon 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-extras-daemon-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-fuzzyclock-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-fuzzyclock-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-fuzzyclock-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-hotcorners-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-hotcorners-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-hotcorners-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-kangaroo-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-kangaroo-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-kangaroo-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-keyboard-autoswitch-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-keyboard-autoswitch-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-keyboard-autoswitch-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-network-manager-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-network-manager-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-network-manager-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-previews",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-previews 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-previews-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-previews-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-previews-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-previews-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-quickchar",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-quickchar 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-quickchar-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-quicknote-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-quicknote-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-quicknote-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-recentlyused-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-recentlyused-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-recentlyused-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-rotation-lock-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-rotation-lock-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-rotation-lock-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-showtime-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-showtime-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-showtime-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-takeabreak-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-takeabreak-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-takeabreak-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-trash-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-trash-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-trash-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-visualspace-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-visualspace-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-visualspace-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-wallstreet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-wallstreet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-wallstreet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-weathershow-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-weathershow-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-weathershow-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-window-shuffler",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-window-shuffler 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-window-shuffler-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-workspace-stopwatch-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-workspace-stopwatch-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-workspace-stopwatch-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "budgie-workspace-wallpaper-applet",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-1ubuntu3.1",
      "fix": "budgie-workspace-wallpaper-applet 1.4.0-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-budgie-workspace-wallpaper-applet-1.4.0-1ubuntu3.1",
      "released": "2023-12-13T16:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}