An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdelibs-develUpgrade kde-workspace-develUpgrade kde-settings-pulseaudioUpgrade kmagUpgrade kdelibs-debuginfoUpgrade kde-settings-minimalUpgrade kde-settings-plasmaUpgrade ksysguarddUpgrade khotkeysUpgrade kde-workspaceUpgrade kde-workspace-ksplash-themesUpgrade oxygen-cursor-themesUpgrade kwin-libsUpgrade ksysguardUpgrade plasma-scriptengine-rubyUpgrade khotkeys-libsUpgrade kdelibs-ktexteditorUpgrade kde-workspace-debuginfoUpgrade kinfocenterUpgrade virtuoso-opensource-debuginfoUpgrade ksysguard-libsUpgrade virtuoso-opensourceUpgrade kdeclassic-cursor-themeUpgrade kmag-debuginfoUpgrade kwin-glesUpgrade kde-workspace-libsUpgrade libkworkspaceUpgrade virtuoso-opensource-utilsUpgrade kwin-gles-libsUpgrade kde-settings-ksplashUpgrade kgreeter-pluginsUpgrade kwinUpgrade kdelibs-apidocsUpgrade kdelibsUpgrade qt-settingsUpgrade kde-style-oxygenUpgrade kcm_colorsUpgrade kdelibs-commonUpgrade kmenueditUpgrade kde-settingsUpgrade plasma-scriptengine-python | Aug 28, 2019 | Feb 7, 2018 |
| Debian | — | Upgrade plasma-workspace | Jul 30, 2024 | Feb 7, 2018 |
| Gentoo Linux | — | Upgrade kde-plasma/plasma-workspace. | Mar 19, 2018 | Feb 6, 2018 |
| Oracle_linux | — | Upgrade kde-workspace-ksplash-themesUpgrade kde-settings-plasmaUpgrade khotkeysUpgrade kdelibs-develUpgrade kinfocenterUpgrade kwin-libsUpgrade ksysguarddUpgrade kde-settings-pulseaudioUpgrade ksysguardUpgrade oxygen-cursor-themesUpgrade plasma-scriptengine-rubyUpgrade kmagUpgrade kde-workspace-develUpgrade kdelibs-apidocsUpgrade kde-workspaceUpgrade kde-settings-minimalUpgrade kdelibs-ktexteditorUpgrade kde-settingsUpgrade kde-settings-ksplashUpgrade kwinUpgrade kde-style-oxygenUpgrade libkworkspaceUpgrade khotkeys-libsUpgrade kwin-glesUpgrade kwin-gles-libsUpgrade kmenueditUpgrade qt-settingsUpgrade kgreeter-pluginsUpgrade virtuoso-opensource-utilsUpgrade plasma-scriptengine-pythonUpgrade virtuoso-opensourceUpgrade kdelibs-commonUpgrade kde-workspace-libsUpgrade kdeclassic-cursor-themeUpgrade ksysguard-libsUpgrade kcm_colorsUpgrade kdelibs | Jul 21, 2020 | Feb 8, 2018 |
| Redhat_linux | — | Upgrade kdelibs-develUpgrade kdelibsUpgrade plasma-scriptengine-rubyUpgrade virtuoso-opensource-utilsUpgrade kwin-libsUpgrade khotkeys-libsUpgrade kde-workspace-debuginfoUpgrade kcm_colorsUpgrade libkworkspaceUpgrade ksysguarddUpgrade kde-settings-ksplashUpgrade kde-workspace-libsUpgrade oxygen-cursor-themesUpgrade kde-settingsUpgrade ksysguardUpgrade kde-settings-minimalUpgrade kdeclassic-cursor-themeUpgrade kgreeter-pluginsUpgrade kdelibs-apidocsUpgrade kmagUpgrade virtuoso-opensourceUpgrade qt-settingsUpgrade kdelibs-ktexteditorUpgrade kinfocenterUpgrade kdelibs-debuginfoUpgrade kwin-glesUpgrade plasma-scriptengine-pythonUpgrade kwin-gles-libsUpgrade kde-workspaceUpgrade virtuoso-opensource-debuginfoUpgrade kde-style-oxygenUpgrade kmenueditUpgrade ksysguard-libsUpgrade kde-workspace-develUpgrade kmag-debuginfoUpgrade kde-settings-pulseaudioUpgrade kdelibs-commonUpgrade kde-settings-plasmaUpgrade kde-workspace-ksplash-themesUpgrade khotkeys | Aug 7, 2019 | Feb 7, 2018 |
| Suse | — | Upgrade plasma5-workspace-langUpgrade plasma5-workspace-libsUpgrade plasma5-workspace-develUpgrade plasma5-workspaceUpgrade drkonqi5 | Feb 9, 2018 | Feb 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub