Launchpad.net

CVE 2023-28371

In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal.

See the CVE page on Mitre.org for more details.