HighFix available
budgie-extras — security advisory
Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may read private information from windows, present false information to users, or deny access to the application.
- Products
- budgie-extras
- Affected versions
- 1.5.0-2, 1.5.90-1, 1.5.91-1, 1.6.0-1, 1.7.0-1, 1.7.0-2, 1.7.0-3, 1.7.1-1, 1.8.0-1, 1.9.0-1, 2.2.1-1, 2.2.2-1, 2.2.3-1, 2.2.3-2, 2.2.3-3, 2.3.0-1, 2.3.0-2, 2.3.0-3, 2.3.0-4, 2.3.1-1, 2.3.1-2
- Fixed versions
- 1.7.1-1
- CVEs
- CVE-2023-49347
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 15:59 UTC · Revision 1
Source evidence
Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may read private information from windows, present false information to users, or deny access to the application.
osv:DEBIAN-CVE-2023-49347
budgie-extras
Fixed versions: Not specified
budgie-extras
Fixed versions: 1.7.1-1
budgie-extras
Fixed versions: 1.7.1-1
Complete source record
{
"id": "e0ecaf6524dd1471085898f69254165060dae2b0a1419b8aeb4562a7a922a29d",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2023-49347",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2023-49347",
"summary": "Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may read private information from windows, present false information to users, or deny access to the application.",
"evidence": "osv:DEBIAN-CVE-2023-49347",
"products": [
{
"name": {
"value": "budgie-extras",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.5.0-2",
"evidence": "/affected/0/versions"
},
{
"value": "1.5.90-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.5.91-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.6.0-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.7.0-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.7.0-2",
"evidence": "/affected/0/versions"
},
{
"value": "1.7.0-3",
"evidence": "/affected/0/versions"
},
{
"value": "1.7.1-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.8.0-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.9.0-1",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.1-1",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.2-1",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.3-1",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.3-2",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.3-3",
"evidence": "/affected/0/versions"
},
{
"value": "2.3.0-1",
"evidence": "/affected/0/versions"
},
{
"value": "2.3.0-2",
"evidence": "/affected/0/versions"
},
{
"value": "2.3.0-3",
"evidence": "/affected/0/versions"
},
{
"value": "2.3.0-4",
"evidence": "/affected/0/versions"
},
{
"value": "2.3.1-1",
"evidence": "/affected/0/versions"
},
{
"value": "2.3.1-2",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "budgie-extras",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.7.1-1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "budgie-extras",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.7.1-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "DEBIAN-CVE-2023-49347",
"aliases": [
"DEBIAN-CVE-2023-49347"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "budgie-extras",
"purl": "pkg:deb/debian/budgie-extras?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"versions": [
"1.5.0-2",
"1.5.90-1",
"1.5.91-1",
"1.6.0-1",
"1.7.0-1",
"1.7.0-2",
"1.7.0-3",
"1.7.1-1",
"1.8.0-1",
"1.9.0-1",
"2.2.1-1",
"2.2.2-1",
"2.2.3-1",
"2.2.3-2",
"2.2.3-3",
"2.3.0-1",
"2.3.0-2",
"2.3.0-3",
"2.3.0-4",
"2.3.1-1",
"2.3.1-2"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-49347.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.7.1-1"
}
]
}
],
"package": {
"name": "budgie-extras",
"purl": "pkg:deb/debian/budgie-extras?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-49347.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.7.1-1"
}
]
}
],
"package": {
"name": "budgie-extras",
"purl": "pkg:deb/debian/budgie-extras?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-49347.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
}
],
"modified": "2026-10-26T18:02:34.916537912Z",
"provider": "osv",
"upstream": [
"CVE-2023-49347"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2023-49347"
]
},
"related_cves": [
{
"value": "CVE-2023-49347",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 456289,
"published_at": "2023-12-14T22:15:43.787+00:00"
}