high7.8
CVE-2023-36250
CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new rec…
Impact
CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnome | Gnome-Time Tracker | Version 3.0.2 |