An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kde-workspace-ksplash-themesUpgrade oxygen-cursor-themesUpgrade kde-settings-plasmaUpgrade kde-settings-minimalUpgrade virtuoso-opensource-debuginfoUpgrade kde-workspace-debuginfoUpgrade khotkeys-libsUpgrade kdelibs-ktexteditorUpgrade kdelibs-develUpgrade kwin-libsUpgrade kde-settings-pulseaudioUpgrade ksysguardUpgrade kmagUpgrade kinfocenterUpgrade plasma-scriptengine-rubyUpgrade kde-workspaceUpgrade khotkeysUpgrade kde-workspace-develUpgrade kdelibs-debuginfoUpgrade ksysguarddUpgrade kdelibs-commonUpgrade qt-settingsUpgrade kdelibs-apidocsUpgrade virtuoso-opensource-utilsUpgrade kde-settingsUpgrade virtuoso-opensourceUpgrade kde-style-oxygenUpgrade kgreeter-pluginsUpgrade kmag-debuginfoUpgrade kmenueditUpgrade plasma-scriptengine-pythonUpgrade kwin-gles-libsUpgrade kcm_colorsUpgrade kde-settings-ksplashUpgrade kwin-glesUpgrade ksysguard-libsUpgrade kwinUpgrade kdelibsUpgrade kdeclassic-cursor-themeUpgrade libkworkspaceUpgrade kde-workspace-libs | Aug 28, 2019 | Feb 7, 2018 |
| Debian | — | Upgrade plasma-workspace | Jul 30, 2024 | Feb 7, 2018 |
| Gentoo Linux | — | Upgrade kde-plasma/plasma-workspace. | Mar 19, 2018 | Feb 6, 2018 |
| Oracle_linux | — | Upgrade kdelibs-ktexteditorUpgrade khotkeysUpgrade kdelibs-apidocsUpgrade kde-workspace-develUpgrade kde-settings-plasmaUpgrade kde-workspaceUpgrade kinfocenterUpgrade oxygen-cursor-themesUpgrade kdelibs-develUpgrade ksysguardUpgrade kde-settings-pulseaudioUpgrade ksysguarddUpgrade kmagUpgrade plasma-scriptengine-rubyUpgrade kde-workspace-ksplash-themesUpgrade kwin-libsUpgrade kde-settings-minimalUpgrade libkworkspaceUpgrade kde-workspace-libsUpgrade kde-settingsUpgrade kde-settings-ksplashUpgrade kdeclassic-cursor-themeUpgrade virtuoso-opensourceUpgrade ksysguard-libsUpgrade virtuoso-opensource-utilsUpgrade khotkeys-libsUpgrade kwin-gles-libsUpgrade kwin-glesUpgrade kmenueditUpgrade kdelibsUpgrade kwinUpgrade kdelibs-commonUpgrade plasma-scriptengine-pythonUpgrade qt-settingsUpgrade kgreeter-pluginsUpgrade kde-style-oxygenUpgrade kcm_colors | Jul 21, 2020 | Feb 8, 2018 |
| Redhat_linux | — | Upgrade kde-workspace-develUpgrade ksysguard-libsUpgrade kmenueditUpgrade qt-settingsUpgrade kde-workspaceUpgrade kdelibs-ktexteditorUpgrade kwin-glesUpgrade kde-settings-pulseaudioUpgrade kdelibs-commonUpgrade kde-settings-plasmaUpgrade kmag-debuginfoUpgrade kdelibs-debuginfoUpgrade plasma-scriptengine-pythonUpgrade khotkeysUpgrade kwin-gles-libsUpgrade virtuoso-opensource-debuginfoUpgrade kinfocenterUpgrade kdelibs-develUpgrade kde-workspace-ksplash-themesUpgrade kde-style-oxygenUpgrade kmagUpgrade kde-settings-minimalUpgrade kgreeter-pluginsUpgrade kwinUpgrade kde-settingsUpgrade khotkeys-libsUpgrade libkworkspaceUpgrade kcm_colorsUpgrade ksysguarddUpgrade kde-workspace-libsUpgrade virtuoso-opensourceUpgrade kwin-libsUpgrade oxygen-cursor-themesUpgrade kde-workspace-debuginfoUpgrade kdeclassic-cursor-themeUpgrade kde-settings-ksplashUpgrade kdelibsUpgrade ksysguardUpgrade plasma-scriptengine-rubyUpgrade kdelibs-apidocsUpgrade virtuoso-opensource-utils | Aug 7, 2019 | Feb 7, 2018 |
| Suse | — | Upgrade plasma5-workspace-libsUpgrade plasma5-workspace-langUpgrade plasma5-workspace-develUpgrade drkonqi5Upgrade plasma5-workspace | Feb 9, 2018 | Feb 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub