CVE-2023-43091

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-43091
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43091.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-43091
Downstream
Published
2024-11-17T12:25:49.293Z
Modified
2026-07-15T01:48:59.471549501Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Gnome-maps: gnome maps is vulnerable to a code injection attack (similar to xss) via its service.json
Details

A flaw was found in GNOME Maps, which is vulnerable to a code injection attack via its service.json configuration file. If the configuration file is malicious, it may execute arbitrary code.

Database specific 
{
    "cwe_ids": [
        "CWE-79"
    ],
    "cna_assigner": "fedora",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43091.json"
}
References

Affected packages

Git / gitlab.gnome.org/gnome/gnome-maps

Affected ranges

Type
GIT
Repo
https://gitlab.gnome.org/gnome/gnome-maps
Events
Introduced
789b6f9b3410d2c980d2274b497844a9e3acabcd
Fixed
9e4b9289259b33e7329601a14bf00c86ac22f8f6
Introduced
c64977b2c7881fd797b3593f019cf1531c651e14
Fixed
cac93ce984c1a49beebe5000910742e3b758f614
Fixed
d26cd774d524404ef7784e6808f551de83de4bea
Database specific 
{
    "extracted_events": [
        {
            "introduced": "43.0"
        },
        {
            "fixed": "43.7"
        },
        {
            "introduced": "44.0"
        },
        {
            "fixed": "44.4"
        }
    ],
    "cpe": "cpe:2.3:a:gnome:gnome-maps:*:*:*:*:*:*:*:*",
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v43.*
v43.0
v43.1
v43.2
v43.3
v43.4
v43.5
v44.*
v44.0
v44.1
v44.2
v44.3
v45.*
v45.alpha
v45.beta

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43091.json"