CVE-2023-36250

Опубликовано: 14 сент. 2023

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record.

Ссылки

https://github.com/BrunoTeixeira1996/CVE-2023-36250/blob/main/README.md
Exploit
Third Party Advisory
https://github.com/BrunoTeixeira1996/CVE-2023-36250/blob/main/README.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnome:gnome-time_tracker:3.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03602

Низкий

7.8 High

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVE-2023-36250

CVSS3: 7.8

ubuntu

больше 2 лет назад

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record.

CVE-2023-36250

CVSS3: 7.8

debian

больше 2 лет назад

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allow ...

GHSA-v7fv-52xm-3gvg

CVSS3: 7.8

github

больше 2 лет назад

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record.

EPSS

Процентиль: 87%

0.03602

Низкий

7.8 High

CVSS3

Дефекты

CWE-74