CVE-2023-28371

CRITICAL 9.8CVE-2023-28371 · Published 15/03/2023 · updated 17/06/2026

In short

CVE-2023-28371 is a CRITICAL (CVSS 9.8) vulnerability affecting stellarium (stellarium).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 75.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
stellarium stellarium	`≤ 1.2`	No fix yet

Description

In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal.

References

Stellarium/stellarium commit 1261f74 · Patch
Stellarium/stellarium commit 787a894 · Patch
Stellarium/stellarium commit eba61df · Patch
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KG6UNRAOYZJSMIUELY3MMJ5J6LIUZXLT
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/REDZB5J7WDN2P3NYWFO2NNJXSTOFUUKM
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQ4ZGY5MDDHBEOQTD4IIA2RFID3ATPXA

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free