CVE-2023-43091

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-43091
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43091.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-43091
Downstream
Published
2024-11-17T13:15:14.140Z
Modified
2026-04-10T05:04:13.010569Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A flaw was found in GNOME Maps, which is vulnerable to a code injection attack via its service.json configuration file. If the configuration file is malicious, it may execute arbitrary code.

References

Affected packages

Git / gitlab.gnome.org/GNOME/gnome-maps

Affected ranges

Type
GIT
Repo
https://gitlab.gnome.org/GNOME/gnome-maps
Events
Introduced
789b6f9b3410d2c980d2274b497844a9e3acabcd
Fixed
9e4b9289259b33e7329601a14bf00c86ac22f8f6
Introduced
c64977b2c7881fd797b3593f019cf1531c651e14
Fixed
cac93ce984c1a49beebe5000910742e3b758f614
Fixed
d26cd774d524404ef7784e6808f551de83de4bea
Database specific 
{
    "versions": [
        {
            "introduced": "43.0"
        },
        {
            "fixed": "43.7"
        },
        {
            "introduced": "44.0"
        },
        {
            "fixed": "44.4"
        }
    ]
}

Affected versions

v43.*
v43.0
v43.1
v43.2
v43.3
v43.4
v43.5
v44.*
v44.0
v44.1
v44.2
v44.3
v45.*
v45.alpha
v45.beta

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43091.json"