CVE-2023-36250: Gnome Gnome-Time Tracker

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record.

Affected products

• Gnome Gnome-Time Tracker: version 3.0.2 only

Published 2023-09-14. Last modified 2026-06-17.