Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mozilla-gtk1Upgrade linux-mozillaUpgrade kdebaseUpgrade mozillaUpgrade netscape7Upgrade linux-operaUpgrade linux-mozilla-develUpgrade operaUpgrade firefoxUpgrade kdelibs | Dec 10, 2025 | Aug 12, 2004 |
| Suse | — | Upgrade kdebase3-64bitUpgrade kdelibs3-x86Upgrade kdelibs3-develUpgrade kdelibs3Upgrade kdelibs3-64bitUpgrade kdebase3-x86Upgrade kdelibs3-32bitUpgrade kdebase3-develUpgrade kdebase3-32bitUpgrade kdebase3 | Dec 12, 2013 | Jul 27, 2004 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub