CVE-2023-49344

Temporary data passed between application components by Budgie Extras Window Shuffler applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel.

• CWE-377
• CWE-668
• CWE-668

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49344Third Party Advisory
• https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-rhwf-6fc9-9jvmThird Party Advisory
• https://ubuntu.com/security/notices/USN-6556-1Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49344Third Party Advisory
• https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-rhwf-6fc9-9jvmThird Party Advisory
• https://ubuntu.com/security/notices/USN-6556-1Vendor Advisory

Published

Dec 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-49339Ellucian Banner 9.17 allows Insecure Direct Object Reference…6.5
• CVE-2023-4934Authorization Bypass Through User-Controlled Key vulnerabili…8.8
• CVE-2023-49340An issue was discovered in Newland Nquire 1000 Interactive K…9.8
• CVE-2023-49341An issue was discovered in Newland Nquire 1000 Interactive K…7.5
• CVE-2023-49342Temporary data passed between application components by Budg…7.8
• CVE-2023-49343Temporary data passed between application components by Budg…7.8
• CVE-2023-49345Temporary data passed between application components by Budg…7.8
• CVE-2023-49346Temporary data passed between application components by Budg…7.8
• CVE-2023-49347Temporary data passed between application components by Budg…7.8
• CVE-2023-4935The BEAR for WordPress is vulnerable to Cross-Site Request F…4.3
• CVE-2023-49351A stack-based buffer overflow vulnerability in /bin/webs bin…9.8
• CVE-2023-49355decToString in decNumber/decNumber.c in jq 88f01a7 has a one…7.5