CVE-2023-43091 CRITICAL

CVE-2023-43091: Gnome-maps: gnome maps is vulnerable to a code injection attack (similar to xss) via its service.json

Weakness CWE-79 · XSS

Published November 17, 2024

Last update November 18, 2024

View on NVD All CVEs

CVSS base score

9.8/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A flaw was found in GNOME Maps, which is vulnerable to a code injection attack via its service.json configuration file. If the configuration file is malicious, it may execute arbitrary code.

Key dates

02Disclosure timeline

November 17, 2024 CVE published

November 18, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-43091 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

CVE-2023-43091: Gnome-maps: gnome maps is vulnerable to a code injection attack (similar to xss) via its service.json

01Description

02Disclosure timeline

03References

04Related CVE