WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gdk-pixbuf2Upgrade gnome-desktop3Upgrade libpurpleUpgrade libpurple-develUpgrade gdk-pixbuf2-xlib-develUpgrade gdk-pixbuf2-develUpgrade pidgin-develUpgrade gnome-desktop3-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-xlibUpgrade pidgin | May 4, 2022 | Jan 14, 2019 |
| Alpine Linux | — | Upgrade webkit2gtk | Nov 8, 2019 | Jan 14, 2019 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4Upgrade webkitgtk4-docUpgrade webkitgtk4-develUpgrade webkitgtk4-jscUpgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jsc-devel | Nov 12, 2020 | Jan 14, 2019 |
| Centos_linux | — | Upgrade wayland-protocols-develUpgrade webkitgtk4-develUpgrade gjs-debuginfoUpgrade plymouth-devel-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade accountsserviceUpgrade plymouth-plugin-scriptUpgrade gnome-software-debugsourceUpgrade gnome-shell-extension-window-listUpgrade gvfs-mtp-debuginfoUpgrade plymouth-graphics-libsUpgrade plymouth-theme-scriptUpgrade webkit2gtk3-develUpgrade gvfs-gphoto2Upgrade chrome-gnome-shellUpgrade appstream-dataUpgrade gnome-softwareUpgrade plymouth-theme-fade-inUpgrade pangoUpgrade baobab-debugsourceUpgrade gvfs-smb-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade accountsservice-libs-debuginfoUpgrade gnome-software-editorUpgrade gnome-shell-debuginfoUpgrade webkit2gtk3-plugin-process-gtk2Upgrade gnome-control-centerUpgrade plymouth-debugsourceUpgrade mozjs60-debuginfoUpgrade mozjs60-debugsourceUpgrade nautilus-extensions-debuginfoUpgrade mutter-debugsourceUpgrade gvfs-goa-debuginfoUpgrade file-roller-debugsourceUpgrade mutter-tests-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gsettings-desktop-schemas-develUpgrade gvfs-afc-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gnome-software-debuginfoUpgrade evinceUpgrade plymouth-theme-spinfinityUpgrade gnome-desktop3Upgrade gnome-tweaksUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gdk-pixbuf2-devel-debuginfoUpgrade evince-nautilus-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade SDL-develUpgrade plymouth-plugin-script-debuginfoUpgrade gvfsUpgrade gnome-shell-extension-user-themeUpgrade plymouth-debuginfoUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade plymouth-theme-solarUpgrade mutterUpgrade plymouth-graphics-libs-debuginfoUpgrade plymouth-core-libs-debuginfoUpgrade pango-tests-debuginfoUpgrade evince-libs-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade gnome-shell-extension-places-menuUpgrade gdmUpgrade gdk-pixbuf2Upgrade gnome-shell-extension-top-iconsUpgrade webkit2gtk3-jscUpgrade plymouth-system-themeUpgrade pango-debuginfoUpgrade gdk-pixbuf2-develUpgrade gsettings-desktop-schemasUpgrade webkit2gtk3Upgrade gdk-pixbuf2-modules-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade plymouth-plugin-labelUpgrade plymouth-scriptsUpgrade gnome-desktop3-debugsourceUpgrade gjs-debugsourceUpgrade pango-develUpgrade plymouth-plugin-two-stepUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-desktop3-tests-debuginfoUpgrade gtk3-immodule-ximUpgrade gvfs-fuseUpgrade gnome-control-center-debuginfoUpgrade gvfs-smbUpgrade evince-debuginfoUpgrade gdm-debuginfoUpgrade plymouth-plugin-throbgress-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-shell-extension-auto-move-windowsUpgrade nautilus-debugsourceUpgrade file-rollerUpgrade gvfs-archiveUpgrade pidgin-debugsourceUpgrade plymouth-plugin-space-flaresUpgrade pidgin-perl-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade gvfs-afp-debuginfoUpgrade mozjs60Upgrade plymouth-plugin-fade-throbberUpgrade gtk-update-icon-cache-debuginfoUpgrade plymouth-core-libsUpgrade evince-browser-pluginUpgrade SDL-debugsourceUpgrade baobab-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade webkitgtk4Upgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-launch-new-instanceUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk3-develUpgrade plymouth-plugin-two-step-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade plymouthUpgrade plymouth-theme-chargeUpgrade gvfs-goaUpgrade gvfs-afcUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-dash-to-dockUpgrade file-roller-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade plymouth-theme-spinnerUpgrade SDL-debuginfoUpgrade plymouth-plugin-throbgressUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade nautilus-debuginfoUpgrade gnome-shellUpgrade libpurple-tcl-debuginfoUpgrade libpurple-perl-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-window-grouperUpgrade nautilusUpgrade libpurple-debuginfoUpgrade pidgin-debuginfoUpgrade webkitgtk4-jsc-develUpgrade gtk3-debuginfoUpgrade gnome-remote-desktopUpgrade gdk-pixbuf2-modulesUpgrade evince-nautilusUpgrade baobabUpgrade webkitgtk4-jscUpgrade gnome-desktop3-debuginfoUpgrade gvfs-mtpUpgrade gvfs-debugsourceUpgrade pidginUpgrade gnome-desktop3-develUpgrade gvfs-clientUpgrade gnome-classic-sessionUpgrade webkitgtk4-docUpgrade webkit2gtk3-jsc-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade mutter-debuginfoUpgrade evince-libsUpgrade libpurpleUpgrade gtk3-tests-debuginfoUpgrade gvfs-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gvfs-client-debuginfoUpgrade gvfs-debuginfoUpgrade pango-debugsourceUpgrade gnome-shell-extension-disable-screenshieldUpgrade accountsservice-debugsourceUpgrade evince-debugsourceUpgrade gnome-settings-daemonUpgrade gnome-control-center-filesystemUpgrade gnome-remote-desktop-debugsourceUpgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gjs-tests-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-software-editor-debuginfoUpgrade accountsservice-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gtk3Upgrade plymouth-plugin-label-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gvfs-afpUpgrade gnome-shell-extension-no-hot-cornerUpgrade gtk3-debugsourceUpgrade finch-debuginfoUpgrade gnome-shell-extension-commonUpgrade nautilus-extensionsUpgrade SDLUpgrade accountsservice-libsUpgrade gnome-shell-extension-drive-menuUpgrade webkitgtk4-debuginfoUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade gdm-debugsourceUpgrade gjsUpgrade plymouth-plugin-space-flares-debuginfo | Sep 17, 2020 | Jan 14, 2019 |
| Debian | — | Upgrade webkit2gtk | Jul 30, 2024 | Jan 14, 2019 |
| Freebsd | — | Upgrade webkit2-gtk3 | Jul 7, 2019 | Jul 6, 2019 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Sep 9, 2019 | Jan 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade webkitgtk3 | Feb 22, 2021 | Jan 14, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade webkitgtk3 | Jan 20, 2021 | Jan 14, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade webkitgtk4Upgrade webkitgtk4-jscUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-plugin-process-gtk2Upgrade webkitgtk4-devel | Nov 19, 2019 | Jan 14, 2019 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.24.4-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Jan 14, 2019 |
| Oracle_linux | — | Upgrade webkitgtk4-docUpgrade webkitgtk4-develUpgrade webkitgtk4-jscUpgrade webkitgtk4Upgrade webkitgtk4-jsc-devel | Oct 7, 2020 | Sep 11, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jan 14, 2019 |
| Redhat_linux | — | Upgrade gvfs-gphoto2-debuginfoUpgrade mutterUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-control-centerUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-window-listUpgrade gdm-debuginfoUpgrade gvfs-fuseUpgrade libpurple-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-control-center-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade gvfs-goa-debuginfoUpgrade nautilus-extensionsUpgrade plymouth-devel-debuginfoUpgrade gnome-software-debugsourceUpgrade plymouth-plugin-space-flaresUpgrade accountsservice-libsUpgrade plymouthUpgrade webkitgtk4-debuginfoUpgrade gvfs-mtpUpgrade gdk-pixbuf2-develUpgrade gvfs-clientUpgrade gvfsUpgrade accountsservice-develUpgrade mozjs60-debugsourceUpgrade evince-debugsourceUpgrade gvfs-develUpgrade pidgin-perl-debuginfoUpgrade plymouth-plugin-scriptUpgrade nautilus-develUpgrade gnome-settings-daemon-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade file-rollerUpgrade plymouth-theme-fade-inUpgrade plymouth-system-themeUpgrade gnome-desktop3-debugsourceUpgrade plymouth-theme-chargeUpgrade gvfs-fuse-debuginfoUpgrade SDL-debuginfoUpgrade gjs-debuginfoUpgrade gnome-shell-extension-updates-dialogUpgrade evince-browser-pluginUpgrade gnome-control-center-filesystemUpgrade plymouth-plugin-throbgress-debuginfoUpgrade mutter-debuginfoUpgrade accountsserviceUpgrade evince-nautilusUpgrade gnome-shell-extension-window-grouperUpgrade pango-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gnome-remote-desktopUpgrade gtk3-devel-debuginfoUpgrade libpurple-perl-debuginfoUpgrade pidgin-develUpgrade gvfs-client-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade accountsservice-debuginfoUpgrade gtk3-develUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-desktop-iconsUpgrade gvfs-goaUpgrade plymouth-plugin-space-flares-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gjs-debugsourceUpgrade webkitgtk4-jsc-develUpgrade libpurple-tcl-debuginfoUpgrade gnome-softwareUpgrade gvfs-debugsourceUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-horizontal-workspacesUpgrade pangoUpgrade plymouth-plugin-two-stepUpgrade plymouth-graphics-libsUpgrade gvfs-smbUpgrade file-roller-debuginfoUpgrade mozjs60Upgrade gtk-update-icon-cacheUpgrade gvfs-debuginfoUpgrade gtk3Upgrade gvfs-afcUpgrade gnome-shell-extension-panel-favoritesUpgrade plymouth-core-libs-debuginfoUpgrade SDL-debugsourceUpgrade gdk-pixbuf2-debugsourceUpgrade plymouth-theme-spinnerUpgrade evince-libsUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-extension-systemMonitorUpgrade webkitgtk4-jscUpgrade nautilus-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-tweaksUpgrade webkitgtk4Upgrade evince-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade webkit2gtk3-plugin-process-gtk2Upgrade pidginUpgrade libpurpleUpgrade mozjs60-debuginfoUpgrade gnome-settings-daemonUpgrade pango-develUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shellUpgrade evince-libs-debuginfoUpgrade libpurple-develUpgrade gsettings-desktop-schemasUpgrade webkit2gtk3-devel-debuginfoUpgrade gdk-pixbuf2-modulesUpgrade baobab-debuginfoUpgrade pidgin-debugsourceUpgrade gvfs-gphoto2Upgrade gdm-debugsourceUpgrade baobabUpgrade gjs-tests-debuginfoUpgrade plymouth-debuginfoUpgrade gdk-pixbuf2-xlib-develUpgrade accountsservice-libs-debuginfoUpgrade mutter-develUpgrade wayland-protocols-develUpgrade webkit2gtk3-debugsourceUpgrade gnome-software-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade gnome-software-editorNo solution existsUpgrade file-roller-debugsourceUpgrade pidgin-debuginfoUpgrade gnome-shell-extension-commonUpgrade plymouth-plugin-script-debuginfoUpgrade baobab-debugsourceUpgrade evinceUpgrade plymouth-theme-solarUpgrade plymouth-graphics-libs-debuginfoUpgrade gtk3-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade finch-debuginfoUpgrade mozjs60-develUpgrade gdmUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade mutter-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade evince-browser-plugin-debuginfoUpgrade gdk-pixbuf2Upgrade webkit2gtk3-jsc-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade chrome-gnome-shellUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-dash-to-dockUpgrade gvfs-mtp-debuginfoUpgrade gvfs-smb-debuginfoUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-workspace-indicatorUpgrade gvfs-afp-debuginfoUpgrade gdk-pixbuf2-modules-debuginfoUpgrade appstream-dataUpgrade webkit2gtk3Upgrade webkitgtk4-docUpgrade webkitgtk4-develUpgrade gnome-shell-extension-native-window-placementUpgrade gvfs-afpUpgrade gdk-pixbuf2-xlibUpgrade plymouth-theme-scriptUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade plymouth-core-libsUpgrade webkit2gtk3-jscUpgrade plymouth-plugin-two-step-debuginfoUpgrade evince-nautilus-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade SDLUpgrade plymouth-plugin-fade-throbberUpgrade plymouth-plugin-labelUpgrade plymouth-plugin-throbgressUpgrade plymouth-scriptsUpgrade gnome-shell-extension-places-menuUpgrade gnome-desktop3-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gjs-develUpgrade pango-tests-debuginfoUpgrade pango-debugsourceUpgrade gvfs-afc-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-desktop3-develUpgrade gnome-desktop3Upgrade gnome-desktop3-tests-debuginfoUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade SDL-develUpgrade gvfs-archiveUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-debugsourceUpgrade nautilus-debugsourceUpgrade gdk-pixbuf2-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade nautilusUpgrade plymouth-debugsourceUpgrade gtk3-immodule-ximUpgrade mutter-tests-debuginfoUpgrade gjsUpgrade plymouth-plugin-label-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade plymouth-theme-spinfinity | Sep 17, 2020 | Jan 14, 2019 |
| Rocky_linux | — | Upgrade libpurple-debuginfoUpgrade gdk-pixbuf2Upgrade libpurpleUpgrade gdk-pixbuf2-debuginfoUpgrade pidginUpgrade pango-debugsourceUpgrade gnome-desktop3Upgrade gnome-desktop3-debugsourceUpgrade gnome-desktop3-develUpgrade libpurple-develUpgrade gdk-pixbuf2-debugsourceUpgrade pidgin-develUpgrade gnome-desktop3-debuginfoUpgrade pango-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-modules-debuginfoUpgrade pango-debuginfoUpgrade pidgin-debuginfoUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-xlibUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade pidgin-debugsourceUpgrade pangoUpgrade gdk-pixbuf2-xlib-devel | Mar 12, 2024 | Jan 14, 2019 |
| Suse | — | Upgrade libwebkit2gtk-4_0-37Upgrade typelib-1_0-webkit2webextension-4_0Upgrade webkit-jsc-4Upgrade webkit2gtk3-develUpgrade webkit2gtk-4_0-injected-bundlesUpgrade libwebkit2gtk-4_0-37-32bitUpgrade libjavascriptcoregtk-4_0-18Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade webkit2gtk3-minibrowserUpgrade typelib-1_0-javascriptcore-4_0Upgrade typelib-1_0-webkit2-4_0Upgrade libwebkit2gtk3-langUpgrade webkit2gtk3-plugin-process-gtk2 | May 7, 2019 | Jan 14, 2019 |
| Ubuntu | — | Upgrade libjavascriptcoregtk-4.0-18Upgrade libwebkit2gtk-4.0-37 | Apr 25, 2019 | Jan 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub