An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade oxygen-cursor-themesUpgrade kwin-libsUpgrade kde-settings-pulseaudioUpgrade plasma-scriptengine-rubyUpgrade virtuoso-opensource-debuginfoUpgrade ksysguardUpgrade kdelibs-develUpgrade kde-settings-minimalUpgrade kde-workspace-develUpgrade kde-settings-plasmaUpgrade kdelibs-ktexteditorUpgrade ksysguarddUpgrade kde-workspaceUpgrade kde-workspace-debuginfoUpgrade kdelibs-debuginfoUpgrade kde-workspace-ksplash-themesUpgrade khotkeys-libsUpgrade kinfocenterUpgrade khotkeysUpgrade kmagUpgrade libkworkspaceUpgrade virtuoso-opensource-utilsUpgrade plasma-scriptengine-pythonUpgrade kdelibs-commonUpgrade kde-settings-ksplashUpgrade kwin-glesUpgrade kwin-gles-libsUpgrade kdelibsUpgrade kde-style-oxygenUpgrade kdelibs-apidocsUpgrade qt-settingsUpgrade kde-settingsUpgrade kde-workspace-libsUpgrade kcm_colorsUpgrade kwinUpgrade kmenueditUpgrade kmag-debuginfoUpgrade kgreeter-pluginsUpgrade ksysguard-libsUpgrade virtuoso-opensourceUpgrade kdeclassic-cursor-theme | Aug 28, 2019 | Feb 7, 2018 |
| Debian | — | Upgrade plasma-workspace | Jul 30, 2024 | Feb 7, 2018 |
| Gentoo Linux | — | Upgrade kde-plasma/plasma-workspace. | Mar 19, 2018 | Feb 6, 2018 |
| Oracle_linux | — | Upgrade ksysguard-libsUpgrade kwin-glesUpgrade khotkeys-libsUpgrade kwin-gles-libsUpgrade kde-workspace-libsUpgrade kdelibs-commonUpgrade qt-settingsUpgrade kmenueditUpgrade kdelibsUpgrade kde-style-oxygenUpgrade libkworkspaceUpgrade kde-settingsUpgrade kdeclassic-cursor-themeUpgrade virtuoso-opensourceUpgrade kgreeter-pluginsUpgrade plasma-scriptengine-pythonUpgrade virtuoso-opensource-utilsUpgrade kwinUpgrade kcm_colorsUpgrade kde-settings-ksplashUpgrade kwin-libsUpgrade kinfocenterUpgrade kdelibs-ktexteditorUpgrade kmagUpgrade plasma-scriptengine-rubyUpgrade kde-workspace-ksplash-themesUpgrade kdelibs-develUpgrade kde-settings-minimalUpgrade kde-settings-pulseaudioUpgrade kdelibs-apidocsUpgrade kde-workspace-develUpgrade kde-settings-plasmaUpgrade oxygen-cursor-themesUpgrade khotkeysUpgrade ksysguarddUpgrade ksysguardUpgrade kde-workspace | Jul 21, 2020 | Feb 8, 2018 |
| Redhat_linux | — | Upgrade kwin-glesUpgrade kde-workspace-ksplash-themesUpgrade virtuoso-opensource-debuginfoUpgrade kde-workspaceUpgrade kdelibs-debuginfoUpgrade kinfocenterUpgrade kmenueditUpgrade kwin-gles-libsUpgrade khotkeysUpgrade kde-workspace-develUpgrade plasma-scriptengine-pythonUpgrade qt-settingsUpgrade kdelibs-commonUpgrade kde-settings-plasmaUpgrade kde-settings-pulseaudioUpgrade kmag-debuginfoUpgrade kdelibs-develUpgrade kdelibs-ktexteditorUpgrade kde-style-oxygenUpgrade ksysguard-libsUpgrade kde-settings-minimalUpgrade kwin-libsUpgrade ksysguarddUpgrade virtuoso-opensourceUpgrade libkworkspaceUpgrade kdelibs-apidocsUpgrade ksysguardUpgrade virtuoso-opensource-utilsUpgrade kdelibsUpgrade kdeclassic-cursor-themeUpgrade plasma-scriptengine-rubyUpgrade kde-settings-ksplashUpgrade oxygen-cursor-themesUpgrade kwinUpgrade khotkeys-libsUpgrade kde-workspace-libsUpgrade kgreeter-pluginsUpgrade kde-settingsUpgrade kmagUpgrade kcm_colorsUpgrade kde-workspace-debuginfo | Aug 7, 2019 | Feb 7, 2018 |
| Suse | — | Upgrade plasma5-workspaceUpgrade drkonqi5Upgrade plasma5-workspace-libsUpgrade plasma5-workspace-langUpgrade plasma5-workspace-devel | Feb 9, 2018 | Feb 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub