CVE-2023-47113

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerable to a DLL Hijacking vulnerability. By placing a DLL in the Folder c:\DLLs, an attacker can run arbitrary code on every execution of BleachBit for Windows. This issue has been patched in version 4.5.0.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published: Nov 8, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-471146.1Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in your runtime environment, and CVE-2023-471155.4Label Studio is an a popular open source data labeling tool. Versions prior to 1.9.2 have a cross-site scripting (XSS) vulnerability that co CVE-2023-471165.3Label Studio is a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.11.0 and was tes CVE-2023-471177.5Label Studio is an open source data labeling tool. In all current versions of Label Studio prior to 1.9.2post0, the application allows users CVE-2023-471189.8ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap CVE-2023-471196.1Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the CVE-2023-47129.8A vulnerability, which was classified as critical, was found in Xintian Smart Table Integrated Management System 5.6.9. This affects an unkn CVE-2023-471207.5Discourse is an open source platform for community discussion. In versions 3.1.0 through 3.1.2 of the `stable` branch and versions 3.1.0,bet CVE-2023-471219.8Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the CVE-2023-471225.3Gitsign is software for keyless Git signing using Sigstore. In versions of gitsign starting with 0.6.0 and prior to 0.8.0, Rekor public keys CVE-2023-471235.4iTop is an IT service management platform. By filling malicious code in an object friendlyname / complementary name, an XSS attack can be p CVE-2023-471245.9Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the `HTTPChallenge` to generate and renew