WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gdk-pixbuf2-xlibUpgrade pidgin-develUpgrade gdk-pixbuf2-develUpgrade gnome-desktop3-develUpgrade pidginUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-xlib-develUpgrade libpurple-develUpgrade gnome-desktop3Upgrade libpurpleUpgrade gdk-pixbuf2 | May 4, 2022 | Jan 14, 2019 |
| Alpine Linux | — | Upgrade webkit2gtk | Nov 8, 2019 | Jan 14, 2019 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-develUpgrade webkitgtk4Upgrade webkitgtk4-jscUpgrade webkitgtk4-doc | Nov 12, 2020 | Jan 14, 2019 |
| Centos_linux | — | Upgrade gvfsUpgrade gvfs-fuse-debuginfoUpgrade nautilus-debugsourceUpgrade webkitgtk4-develUpgrade gnome-shell-extension-workspace-indicatorUpgrade gvfs-smb-debuginfoUpgrade pango-tests-debuginfoUpgrade evince-libs-debuginfoUpgrade pango-debuginfoUpgrade gnome-shell-extension-window-listUpgrade gdk-pixbuf2-develUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-apps-menuUpgrade gvfs-goa-debuginfoUpgrade gnome-tweaksUpgrade plymouth-plugin-two-stepUpgrade plymouth-plugin-script-debuginfoUpgrade SDL-develUpgrade gnome-shell-extension-systemMonitorUpgrade gvfs-gphoto2Upgrade gsettings-desktop-schemasUpgrade gvfs-afp-debuginfoUpgrade pidgin-debugsourceUpgrade appstream-dataUpgrade gnome-softwareUpgrade gjs-debugsourceUpgrade gvfs-archiveUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-debuginfoUpgrade webkit2gtk3-plugin-process-gtk2Upgrade gnome-settings-daemon-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade plymouth-theme-fade-inUpgrade gtk3-immodules-debuginfoUpgrade file-roller-debugsourceUpgrade plymouth-system-themeUpgrade mozjs60-debugsourceUpgrade plymouth-graphics-libs-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade accountsservice-libs-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gnome-control-centerUpgrade webkit2gtk3Upgrade gdk-pixbuf2-debugsourceUpgrade plymouth-theme-solarUpgrade baobab-debugsourceUpgrade plymouth-plugin-labelUpgrade mozjs60-debuginfoUpgrade plymouth-debugsourceUpgrade gnome-software-debuginfoUpgrade plymouth-theme-scriptUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gvfs-afc-debuginfoUpgrade gdk-pixbuf2-modules-debuginfoUpgrade mutter-tests-debuginfoUpgrade plymouth-theme-spinfinityUpgrade evinceUpgrade gnome-shell-extension-user-themeUpgrade gnome-desktop3-debugsourceUpgrade plymouth-scriptsUpgrade webkit2gtk3-jscUpgrade gvfs-mtp-debuginfoUpgrade evince-nautilus-debuginfoUpgrade chrome-gnome-shellUpgrade gsettings-desktop-schemas-develUpgrade mutterUpgrade webkit2gtk3-debuginfoUpgrade plymouth-plugin-space-flaresUpgrade gdk-pixbuf2Upgrade gnome-shell-extension-top-iconsUpgrade pango-develUpgrade mutter-debugsourceUpgrade plymouth-core-libs-debuginfoUpgrade gnome-desktop3Upgrade pangoUpgrade gnome-remote-desktop-debuginfoUpgrade accountsserviceUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-updates-dialogUpgrade gvfs-fuseUpgrade file-rollerUpgrade gvfs-smbUpgrade plymouth-plugin-throbgress-debuginfoUpgrade wayland-protocols-develUpgrade gjs-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-desktop3-tests-debuginfoUpgrade gdm-debuginfoUpgrade gnome-shell-debugsourceUpgrade pidgin-perl-debuginfoUpgrade evince-debuginfoUpgrade gtk3-immodule-ximUpgrade plymouth-devel-debuginfoUpgrade gnome-software-editorUpgrade plymouth-debuginfoUpgrade gnome-software-debugsourceUpgrade plymouth-graphics-libsUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade plymouth-plugin-scriptUpgrade gdmUpgrade gnome-shell-extension-drive-menuUpgrade gnome-settings-daemon-debugsourceUpgrade gtk3-debuginfoUpgrade finch-debuginfoUpgrade evince-libsUpgrade gdk-pixbuf2-tests-debuginfoUpgrade evince-debugsourceUpgrade gnome-shell-extension-disable-screenshieldUpgrade gdm-debugsourceUpgrade libpurple-debuginfoUpgrade evince-nautilusUpgrade webkitgtk4-debuginfoUpgrade gnome-shell-extension-commonUpgrade SDLUpgrade gnome-desktop3-develUpgrade gvfs-debugsourceUpgrade gtk3-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade accountsservice-libsUpgrade gnome-shell-extension-no-hot-cornerUpgrade nautilus-extensionsUpgrade webkitgtk4-docUpgrade webkit2gtk3-jsc-debuginfoUpgrade gvfs-clientUpgrade pidginUpgrade gvfs-debuginfoUpgrade gnome-classic-sessionUpgrade pango-debugsourceUpgrade mutter-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade nautilusUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-desktop3-debuginfoUpgrade baobabUpgrade SDL-debugsourceUpgrade webkitgtk4-jscUpgrade webkit2gtk3-debugsourceUpgrade mozjs60Upgrade gtk3Upgrade plymouth-plugin-space-flares-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gdk-pixbuf2-debuginfoUpgrade libpurpleUpgrade plymouth-plugin-label-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade gjs-tests-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gvfs-afpUpgrade plymouth-core-libsUpgrade gnome-shell-extension-window-grouperUpgrade gtk-update-icon-cache-debuginfoUpgrade plymouth-plugin-fade-throbberUpgrade plymouth-plugin-throbgressUpgrade gtk3-devel-debuginfoUpgrade webkitgtk4-jsc-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade libpurple-tcl-debuginfoUpgrade nautilus-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gnome-settings-daemonUpgrade baobab-debuginfoUpgrade libpurple-perl-debuginfoUpgrade gjsUpgrade gvfs-develUpgrade gnome-shellUpgrade webkitgtk4Upgrade gtk3-develUpgrade evince-browser-pluginUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-horizontal-workspacesUpgrade SDL-debuginfoUpgrade plymouth-plugin-two-step-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade plymouth-theme-chargeUpgrade gvfs-goaUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade plymouthUpgrade gvfs-afcUpgrade plymouth-theme-spinnerUpgrade gnome-shell-extension-dash-to-dockUpgrade file-roller-debuginfoUpgrade gtk-update-icon-cacheUpgrade pidgin-debuginfoUpgrade gvfs-mtpUpgrade gvfs-client-debuginfoUpgrade gnome-remote-desktopUpgrade gnome-control-center-filesystemUpgrade gdk-pixbuf2-modules | Sep 17, 2020 | Jan 14, 2019 |
| Debian | — | Upgrade webkit2gtk | Jul 30, 2024 | Jan 14, 2019 |
| Freebsd | — | Upgrade webkit2-gtk3 | Jul 7, 2019 | Jul 6, 2019 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Sep 9, 2019 | Jan 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade webkitgtk3 | Feb 22, 2021 | Jan 14, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade webkitgtk3 | Jan 20, 2021 | Jan 14, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade webkitgtk4Upgrade webkitgtk4-plugin-process-gtk2Upgrade webkitgtk4-jscUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-devel | Nov 19, 2019 | Jan 14, 2019 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.24.4-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Jan 14, 2019 |
| Oracle_linux | — | Upgrade webkitgtk4-jsc-develUpgrade webkitgtk4-docUpgrade webkitgtk4-jscUpgrade webkitgtk4-develUpgrade webkitgtk4 | Oct 7, 2020 | Sep 11, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jan 14, 2019 |
| Redhat_linux | — | Upgrade plymouth-theme-spinnerUpgrade plymouth-theme-spinfinityUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-tweaksUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade evince-libsUpgrade webkitgtk4-jscUpgrade gtk3-immodule-ximUpgrade appstream-dataUpgrade gtk3-immodules-debuginfoUpgrade webkitgtk4-develUpgrade gtk3-immodule-xim-debuginfoUpgrade evince-nautilus-debuginfoUpgrade baobabUpgrade baobab-debugsourceUpgrade gdm-debugsourceUpgrade gvfs-archiveUpgrade accountsservice-debugsourceUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade plymouth-plugin-script-debuginfoUpgrade nautilus-debugsourceUpgrade plymouth-theme-solarUpgrade gdmUpgrade webkit2gtk3-jsc-debuginfoUpgrade mutter-debugsourceUpgrade gnome-desktop3-develUpgrade evinceUpgrade mutter-develUpgrade gdk-pixbuf2-debugsourceUpgrade mozjs60-develUpgrade plymouth-debuginfoUpgrade gsettings-desktop-schemasUpgrade SDL-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-plugin-process-gtk2Upgrade pidgin-debugsourceUpgrade gdk-pixbuf2-modulesUpgrade gvfs-mtp-debuginfoUpgrade evince-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade pidgin-debuginfoUpgrade baobab-debuginfoUpgrade gvfs-afc-debuginfoUpgrade evince-libs-debuginfoUpgrade libpurpleUpgrade gnome-shell-extension-disable-screenshieldUpgrade plymouth-plugin-fade-throbberUpgrade evince-browser-plugin-debuginfoUpgrade gdk-pixbuf2Upgrade gnome-desktop3Upgrade plymouth-plugin-labelUpgrade gsettings-desktop-schemas-develUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade plymouth-theme-scriptUpgrade mozjs60-debuginfoUpgrade gjs-tests-debuginfoUpgrade plymouth-graphics-libs-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-windowsNavigatorUpgrade file-roller-debugsourceUpgrade webkitgtk4Upgrade plymouth-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade SDLUpgrade pidginUpgrade finch-debuginfoUpgrade gjs-develUpgrade gvfs-gphoto2Upgrade plymouth-plugin-label-debuginfoUpgrade gnome-software-debuginfoUpgrade gdk-pixbuf2-debuginfoUpgrade gjsUpgrade plymouth-plugin-two-step-debuginfoUpgrade SDL-develUpgrade plymouth-plugin-throbgressUpgrade webkit2gtk3No solution existsUpgrade libpurple-develUpgrade pango-develUpgrade gtk3-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade nautilus-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade webkit2gtk3-jscUpgrade wayland-protocols-develUpgrade pango-debugsourceUpgrade gnome-desktop3-tests-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade plymouth-scriptsUpgrade gnome-shell-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade chrome-gnome-shellUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade plymouth-core-libsUpgrade nautilus-extensions-debuginfoUpgrade gvfs-smb-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gnome-classic-sessionUpgrade gvfs-archive-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gdk-pixbuf2-xlibUpgrade gvfs-afp-debuginfoUpgrade gnome-software-editorUpgrade pango-tests-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-debugsourceUpgrade webkitgtk4-docUpgrade gnome-control-center-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-commonUpgrade mutter-tests-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade nautilusUpgrade gnome-desktop3-debuginfoUpgrade gvfs-afpUpgrade gnome-settings-daemonUpgrade gnome-shellUpgrade gdk-pixbuf2-xlib-develUpgrade gvfs-debuginfoUpgrade gnome-shell-extension-updates-dialogUpgrade evince-debugsourceUpgrade mutterUpgrade gjs-debugsourceUpgrade gjs-debuginfoUpgrade plymouth-plugin-throbgress-debuginfoUpgrade gvfs-develUpgrade libpurple-debuginfoUpgrade accountsservice-debuginfoUpgrade libpurple-tcl-debuginfoUpgrade plymouth-plugin-two-stepUpgrade gnome-shell-extension-window-listUpgrade gnome-remote-desktop-debuginfoUpgrade plymouth-core-libs-debuginfoUpgrade plymouthUpgrade accountsservice-libsUpgrade gvfs-client-debuginfoUpgrade mozjs60Upgrade gvfs-debugsourceUpgrade webkitgtk4-debuginfoUpgrade plymouth-theme-chargeUpgrade gnome-control-center-filesystemUpgrade mutter-debuginfoUpgrade gnome-desktop3-debugsourceUpgrade gnome-softwareUpgrade plymouth-graphics-libsUpgrade accountsservice-develUpgrade gvfs-mtpUpgrade file-roller-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade gvfs-goaUpgrade gnome-control-center-debuginfoUpgrade mozjs60-debugsourceUpgrade SDL-debuginfoUpgrade accountsserviceUpgrade gtk3-develUpgrade gnome-software-editor-debuginfoUpgrade evince-nautilusUpgrade libpurple-perl-debuginfoUpgrade pangoUpgrade gtk3Upgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-panel-favoritesUpgrade gvfs-afcUpgrade gnome-shell-extension-window-grouperUpgrade gvfs-smbUpgrade gnome-remote-desktopUpgrade gtk3-devel-debuginfoUpgrade webkitgtk4-jsc-develUpgrade nautilus-extensionsUpgrade evince-browser-pluginUpgrade plymouth-system-themeUpgrade gvfs-fuseUpgrade gnome-software-debugsourceUpgrade plymouth-devel-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade plymouth-theme-fade-inUpgrade file-rollerUpgrade plymouth-plugin-space-flaresUpgrade gnome-settings-daemon-debuginfoUpgrade gvfsUpgrade gvfs-clientUpgrade gvfs-goa-debuginfoUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-no-hot-cornerUpgrade pidgin-perl-debuginfoUpgrade plymouth-plugin-space-flares-debuginfoUpgrade pidgin-develUpgrade pango-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gdk-pixbuf2-develUpgrade gtk3-debugsourceUpgrade nautilus-develUpgrade gnome-shell-extension-auto-move-windowsUpgrade gdm-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade plymouth-plugin-scriptUpgrade webkit2gtk3-develUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-control-centerUpgrade gtk3-tests-debuginfo | Sep 17, 2020 | Jan 14, 2019 |
| Rocky_linux | — | Upgrade gnome-desktop3-debugsourceUpgrade gnome-desktop3-develUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-debuginfoUpgrade gnome-desktop3Upgrade gdk-pixbuf2-debugsourceUpgrade pidginUpgrade libpurpleUpgrade gnome-desktop3-debuginfoUpgrade libpurple-debuginfoUpgrade pidgin-develUpgrade pango-debugsourceUpgrade libpurple-develUpgrade pango-develUpgrade pangoUpgrade gdk-pixbuf2-xlibUpgrade pidgin-debuginfoUpgrade gdk-pixbuf2-develUpgrade pango-debuginfoUpgrade pidgin-debugsourceUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-xlib-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-modules-debuginfo | Mar 12, 2024 | Jan 14, 2019 |
| Suse | — | Upgrade typelib-1_0-webkit2webextension-4_0Upgrade libwebkit2gtk-4_0-37Upgrade webkit2gtk3-develUpgrade webkit-jsc-4Upgrade libjavascriptcoregtk-4_0-18Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade webkit2gtk3-minibrowserUpgrade typelib-1_0-javascriptcore-4_0Upgrade typelib-1_0-webkit2-4_0Upgrade libwebkit2gtk-4_0-37-32bitUpgrade webkit2gtk-4_0-injected-bundlesUpgrade webkit2gtk3-plugin-process-gtk2Upgrade libwebkit2gtk3-lang | May 7, 2019 | Jan 14, 2019 |
| Ubuntu | — | Upgrade libwebkit2gtk-4.0-37Upgrade libjavascriptcoregtk-4.0-18 | Apr 25, 2019 | Jan 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub