Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, creating a time-of-check to time-of-use race that allowed a local unprivileged attacker on the same machine to pre-plant a symlink and cause Flameshot to write PNG data through it, overwriting any file the victim user could write. This issue is fixed in version 14.0.0.
0.5.0+git20180114-10.5.0+git20180222-10.5.1-10.5.1-20.6.0+git20190714-10.6.0+git20191001-10.6.0+git20191001-2Exploitability
AV:LAC:LAT:NPR:NUI:NVulnerable System
VC:NVI:LVA:LSubsequent System
SC:NSI:NSA:NCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N