Vulnerability Details CVE-2023-36250
CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.028
EPSS Ranking 85.6%
CVSS Severity
CVSS v3 Score 7.8
References
Products affected by CVE-2023-36250
-
cpe:2.3:a:gnome:gnome-time_tracker:3.0.2