An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdeclassic-cursor-themeUpgrade plasma-scriptengine-pythonUpgrade kwinUpgrade virtuoso-opensourceUpgrade kde-settings-ksplashUpgrade libkworkspaceUpgrade kwin-glesUpgrade kdelibs-apidocsUpgrade qt-settingsUpgrade kdelibsUpgrade kde-settingsUpgrade kdelibs-commonUpgrade kwin-gles-libsUpgrade ksysguard-libsUpgrade kde-workspace-libsUpgrade kde-style-oxygenUpgrade kmenueditUpgrade kcm_colorsUpgrade virtuoso-opensource-utilsUpgrade kmag-debuginfoUpgrade kgreeter-pluginsUpgrade kde-workspace-ksplash-themesUpgrade ksysguarddUpgrade kde-settings-plasmaUpgrade kmagUpgrade kde-settings-pulseaudioUpgrade kde-settings-minimalUpgrade kde-workspace-develUpgrade kdelibs-debuginfoUpgrade kinfocenterUpgrade kde-workspace-debuginfoUpgrade virtuoso-opensource-debuginfoUpgrade oxygen-cursor-themesUpgrade kde-workspaceUpgrade ksysguardUpgrade kwin-libsUpgrade khotkeysUpgrade kdelibs-ktexteditorUpgrade kdelibs-develUpgrade khotkeys-libsUpgrade plasma-scriptengine-ruby | Aug 28, 2019 | Feb 7, 2018 |
| Debian | — | Upgrade plasma-workspace | Jul 30, 2024 | Feb 7, 2018 |
| Gentoo Linux | — | Upgrade kde-plasma/plasma-workspace. | Mar 19, 2018 | Feb 6, 2018 |
| Oracle_linux | — | Upgrade kinfocenterUpgrade kwin-libsUpgrade kde-workspace-develUpgrade kdelibs-apidocsUpgrade khotkeysUpgrade kde-settings-minimalUpgrade kdelibs-develUpgrade kmagUpgrade ksysguardUpgrade oxygen-cursor-themesUpgrade plasma-scriptengine-rubyUpgrade kde-settings-plasmaUpgrade ksysguarddUpgrade kde-settings-pulseaudioUpgrade kde-workspace-ksplash-themesUpgrade kdelibs-ktexteditorUpgrade kde-workspaceUpgrade kde-style-oxygenUpgrade kwinUpgrade virtuoso-opensource-utilsUpgrade kwin-gles-libsUpgrade kwin-glesUpgrade plasma-scriptengine-pythonUpgrade kde-workspace-libsUpgrade ksysguard-libsUpgrade kcm_colorsUpgrade virtuoso-opensourceUpgrade khotkeys-libsUpgrade kmenueditUpgrade kgreeter-pluginsUpgrade qt-settingsUpgrade kdelibsUpgrade kdelibs-commonUpgrade kde-settingsUpgrade kdeclassic-cursor-themeUpgrade libkworkspaceUpgrade kde-settings-ksplash | Jul 21, 2020 | Feb 8, 2018 |
| Redhat_linux | — | Upgrade kwinUpgrade kdeclassic-cursor-themeUpgrade kmagUpgrade kwin-libsUpgrade kcm_colorsUpgrade kdelibs-apidocsUpgrade kde-settings-minimalUpgrade kde-settingsUpgrade virtuoso-opensourceUpgrade plasma-scriptengine-rubyUpgrade kdelibsUpgrade virtuoso-opensource-utilsUpgrade ksysguarddUpgrade kgreeter-pluginsUpgrade kde-workspace-libsUpgrade ksysguardUpgrade oxygen-cursor-themesUpgrade libkworkspaceUpgrade kde-settings-ksplashUpgrade khotkeys-libsUpgrade kde-workspace-debuginfoUpgrade kinfocenterUpgrade kdelibs-debuginfoUpgrade kdelibs-develUpgrade ksysguard-libsUpgrade kmag-debuginfoUpgrade virtuoso-opensource-debuginfoUpgrade kwin-gles-libsUpgrade kwin-glesUpgrade kde-workspace-ksplash-themesUpgrade kde-settings-plasmaUpgrade kdelibs-commonUpgrade plasma-scriptengine-pythonUpgrade kde-workspaceUpgrade kde-style-oxygenUpgrade kdelibs-ktexteditorUpgrade qt-settingsUpgrade kmenueditUpgrade kde-workspace-develUpgrade khotkeysUpgrade kde-settings-pulseaudio | Aug 7, 2019 | Feb 7, 2018 |
| Suse | — | Upgrade plasma5-workspace-libsUpgrade plasma5-workspace-develUpgrade plasma5-workspace-langUpgrade drkonqi5Upgrade plasma5-workspace | Feb 9, 2018 | Feb 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub