CVE-2023-49346: Ubuntubudgie Budgie Extras

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Temporary data passed between application components by Budgie Extras WeatherShow applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel.

Affected products

• Ubuntubudgie Budgie Extras: from 1.4.0, before 1.7.1 (fixed in 1.7.1)

Published 2023-12-14. Last modified 2026-06-17.