An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdelibs-debuginfoUpgrade kde-workspace-debuginfoUpgrade kwin-libsUpgrade kdelibs-ktexteditorUpgrade khotkeys-libsUpgrade kde-settings-pulseaudioUpgrade virtuoso-opensource-debuginfoUpgrade kinfocenterUpgrade kmagUpgrade plasma-scriptengine-rubyUpgrade kde-settings-plasmaUpgrade oxygen-cursor-themesUpgrade kde-workspaceUpgrade ksysguarddUpgrade kdelibs-develUpgrade khotkeysUpgrade ksysguardUpgrade kde-workspace-develUpgrade kde-workspace-ksplash-themesUpgrade kde-settings-minimalUpgrade libkworkspaceUpgrade kmenueditUpgrade ksysguard-libsUpgrade kdelibsUpgrade kdelibs-commonUpgrade kcm_colorsUpgrade kde-settingsUpgrade kde-workspace-libsUpgrade virtuoso-opensourceUpgrade qt-settingsUpgrade kdeclassic-cursor-themeUpgrade kwin-glesUpgrade kde-style-oxygenUpgrade kdelibs-apidocsUpgrade virtuoso-opensource-utilsUpgrade plasma-scriptengine-pythonUpgrade kgreeter-pluginsUpgrade kmag-debuginfoUpgrade kwinUpgrade kde-settings-ksplashUpgrade kwin-gles-libs | Aug 28, 2019 | Feb 7, 2018 |
| Debian | — | Upgrade plasma-workspace | Jul 30, 2024 | Feb 7, 2018 |
| Gentoo Linux | — | Upgrade kde-plasma/plasma-workspace. | Mar 19, 2018 | Feb 6, 2018 |
| Oracle_linux | — | Upgrade khotkeys-libsUpgrade kwin-gles-libsUpgrade kmenueditUpgrade kwin-glesUpgrade kwinUpgrade virtuoso-opensourceUpgrade plasma-scriptengine-pythonUpgrade kde-style-oxygenUpgrade kde-settingsUpgrade kcm_colorsUpgrade ksysguard-libsUpgrade libkworkspaceUpgrade kde-workspace-libsUpgrade kgreeter-pluginsUpgrade kde-settings-ksplashUpgrade virtuoso-opensource-utilsUpgrade kdelibsUpgrade kdeclassic-cursor-themeUpgrade kdelibs-commonUpgrade qt-settingsUpgrade kde-settings-pulseaudioUpgrade kdelibs-develUpgrade kde-workspace-ksplash-themesUpgrade kwin-libsUpgrade kinfocenterUpgrade kdelibs-ktexteditorUpgrade kdelibs-apidocsUpgrade kde-workspaceUpgrade kde-workspace-develUpgrade kde-settings-plasmaUpgrade oxygen-cursor-themesUpgrade khotkeysUpgrade ksysguarddUpgrade kde-settings-minimalUpgrade kmagUpgrade plasma-scriptengine-rubyUpgrade ksysguard | Jul 21, 2020 | Feb 8, 2018 |
| Redhat_linux | — | Upgrade kwin-glesUpgrade kdelibs-develUpgrade virtuoso-opensource-debuginfoUpgrade plasma-scriptengine-pythonUpgrade kde-settings-pulseaudioUpgrade kde-workspaceUpgrade kdelibs-debuginfoUpgrade qt-settingsUpgrade kinfocenterUpgrade kde-settings-plasmaUpgrade kdelibs-ktexteditorUpgrade kde-style-oxygenUpgrade kwin-gles-libsUpgrade kmenueditUpgrade kde-workspace-ksplash-themesUpgrade kmag-debuginfoUpgrade kdelibs-commonUpgrade ksysguard-libsUpgrade khotkeysUpgrade kde-workspace-develUpgrade kgreeter-pluginsUpgrade kde-workspace-libsUpgrade libkworkspaceUpgrade kdelibsUpgrade kde-settings-minimalUpgrade oxygen-cursor-themesUpgrade kdelibs-apidocsUpgrade kcm_colorsUpgrade virtuoso-opensource-utilsUpgrade kmagUpgrade ksysguarddUpgrade kde-workspace-debuginfoUpgrade kwin-libsUpgrade plasma-scriptengine-rubyUpgrade virtuoso-opensourceUpgrade kde-settingsUpgrade kdeclassic-cursor-themeUpgrade ksysguardUpgrade kde-settings-ksplashUpgrade khotkeys-libsUpgrade kwin | Aug 7, 2019 | Feb 7, 2018 |
| Suse | — | Upgrade drkonqi5Upgrade plasma5-workspaceUpgrade plasma5-workspace-libsUpgrade plasma5-workspace-langUpgrade plasma5-workspace-devel | Feb 9, 2018 | Feb 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub