Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-43091

Gnome-maps: gnome maps is vulnerable to a code injection attack (similar to xss) via its service.json

Description

A flaw was found in GNOME Maps, which is vulnerable to a code injection attack via its service.json configuration file. If the configuration file is malicious, it may execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

gnome-maps

Default version status: unaffected

  • 43.0 to ≤ 45.betaaffected

References