CVE-2023-28371

CVSS V2 None CVSS V3 None
Description
In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal.
Overview
  • CVE ID
  • CVE-2023-28371
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2023-03-15T04:15:11
  • Last Modified Date
  • 2023-03-29T05:15:07
Weakness Enumerations
CWE URL
CWE-22 http://cwe.mitre.org/data/definitions/22.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:stellarium:stellarium:*:*:*:*:*:*:*:* 1 OR 1.2
References
Reference URL Reference Tags
https://github.com/Stellarium/stellarium/commit/1261f74dc4aa6bbd01ab514343424097f8cf46b7 Patch
https://github.com/Stellarium/stellarium/commit/787a894897b7872ae96e6f5804a182210edd5c78 Patch
https://github.com/Stellarium/stellarium/commit/eba61df3b38605befcb43687a4c0a159dbc0c5cb Patch
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KG6UNRAOYZJSMIUELY3MMJ5J6LIUZXLT/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REDZB5J7WDN2P3NYWFO2NNJXSTOFUUKM/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YQ4ZGY5MDDHBEOQTD4IIA2RFID3ATPXA/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-28371
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28371
History
Created Old Value New Value Data Type Notes
2023-04-17 06:29:28 Added to TrackCVE
2023-04-17 06:29:30 Weakness Enumeration new