WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-desktop3-develUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-modulesUpgrade pidgin-develUpgrade gdk-pixbuf2-xlibUpgrade pidginUpgrade libpurple-develUpgrade gdk-pixbuf2-xlib-develUpgrade gdk-pixbuf2Upgrade libpurpleUpgrade gnome-desktop3 | May 4, 2022 | Jan 14, 2019 |
| Alpine Linux | — | Upgrade webkit2gtk | Nov 8, 2019 | Jan 14, 2019 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-docUpgrade webkitgtk4-jscUpgrade webkitgtk4-develUpgrade webkitgtk4Upgrade webkitgtk4-jsc-develUpgrade webkitgtk4-debuginfo | Nov 12, 2020 | Jan 14, 2019 |
| Centos_linux | — | Upgrade nautilusUpgrade gtk3-immodule-xim-debuginfoUpgrade libpurpleUpgrade gnome-shell-extension-launch-new-instanceUpgrade pango-debugsourceUpgrade libpurple-perl-debuginfoUpgrade nautilus-debuginfoUpgrade gnome-settings-daemonUpgrade webkit2gtk3-jsc-develUpgrade gvfs-debuginfoUpgrade webkitgtk4Upgrade SDL-debuginfoUpgrade evince-libsUpgrade pidginUpgrade webkitgtk4-docUpgrade gnome-shell-extension-dash-to-dockUpgrade file-roller-debuginfoUpgrade plymouth-theme-chargeUpgrade plymouth-plugin-two-step-debuginfoUpgrade gnome-remote-desktopUpgrade gvfs-goaUpgrade gvfs-afcUpgrade evince-browser-pluginUpgrade libpurple-debuginfoUpgrade pidgin-debuginfoUpgrade webkitgtk4-jsc-develUpgrade gtk-update-icon-cacheUpgrade gdk-pixbuf2-modulesUpgrade gvfs-client-debuginfoUpgrade gdm-debugsourceUpgrade plymouthUpgrade evince-nautilusUpgrade gnome-software-editor-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade gtk3Upgrade gnome-shell-extension-horizontal-workspacesUpgrade accountsservice-debuginfoUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade accountsservice-debugsourceUpgrade plymouth-core-libsUpgrade plymouth-plugin-fade-throbberUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade plymouth-plugin-label-debuginfoUpgrade gvfs-debugsourceUpgrade gnome-classic-sessionUpgrade gvfs-afpUpgrade gjs-tests-debuginfoUpgrade evince-debugsourceUpgrade gnome-desktop3-develUpgrade gtk3-develUpgrade gdk-pixbuf2-tests-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gvfs-clientUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-devel-debuginfoUpgrade baobabUpgrade baobab-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade gnome-desktop3-debuginfoUpgrade webkitgtk4-jscUpgrade SDL-debugsourceUpgrade gtk3-tests-debuginfoUpgrade libpurple-tcl-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gvfs-gphoto2-debuginfoUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade finch-debuginfoUpgrade accountsservice-libsUpgrade gtk3-debugsourceUpgrade SDLUpgrade webkit2gtk3-devel-debuginfoUpgrade webkitgtk4-debuginfoUpgrade gnome-shell-extension-commonUpgrade gvfs-develUpgrade mutter-debuginfoUpgrade gjsUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-control-center-filesystemUpgrade gtk3-debuginfoUpgrade nautilus-extensionsUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shellUpgrade gdk-pixbuf2-debuginfoUpgrade plymouth-plugin-throbgressUpgrade plymouth-theme-spinnerUpgrade mozjs60Upgrade plymouth-plugin-space-flares-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gvfs-mtpUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-drive-menuUpgrade SDL-develUpgrade mutter-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade plymouth-core-libs-debuginfoUpgrade mutterUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gnome-shell-extension-user-themeUpgrade file-rollerUpgrade pidgin-perl-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade plymouth-plugin-throbgress-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade plymouth-theme-solarUpgrade plymouth-plugin-scriptUpgrade evinceUpgrade file-roller-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-tweaksUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-desktop3Upgrade gvfs-goa-debuginfoUpgrade gnome-software-debuginfoUpgrade plymouth-theme-spinfinityUpgrade mutter-tests-debuginfoUpgrade gvfs-afc-debuginfoUpgrade gdm-debuginfoUpgrade gvfs-fuseUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-auto-move-windowsUpgrade gjs-debuginfoUpgrade evince-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade gnome-software-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade plymouth-graphics-libsUpgrade webkit2gtk3-plugin-process-gtk2Upgrade mozjs60-debuginfoUpgrade plymouth-theme-fade-inUpgrade gnome-control-centerUpgrade plymouth-debugsourceUpgrade pangoUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade webkit2gtk3-develUpgrade plymouth-scriptsUpgrade gnome-shell-extension-window-listUpgrade evince-libs-debuginfoUpgrade plymouth-plugin-space-flaresUpgrade gnome-desktop3-debugsourceUpgrade gnome-shell-extension-places-menuUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade nautilus-debugsourceUpgrade gvfsUpgrade gdmUpgrade gnome-shell-extension-apps-menuUpgrade plymouth-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade plymouth-theme-scriptUpgrade gdk-pixbuf2-modules-debuginfoUpgrade webkitgtk4-develUpgrade plymouth-plugin-labelUpgrade plymouth-graphics-libs-debuginfoUpgrade plymouth-system-themeUpgrade gnome-shell-debugsourceUpgrade accountsserviceUpgrade baobab-debugsourceUpgrade pango-debuginfoUpgrade gvfs-archive-debuginfoUpgrade evince-nautilus-debuginfoUpgrade gnome-software-editorUpgrade gnome-desktop3-tests-debuginfoUpgrade gvfs-smbUpgrade pango-develUpgrade mozjs60-debugsourceUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-native-window-placementUpgrade plymouth-plugin-script-debuginfoUpgrade wayland-protocols-develUpgrade gtk3-immodule-ximUpgrade pango-tests-debuginfoUpgrade plymouth-plugin-two-stepUpgrade gvfs-smb-debuginfoUpgrade gdk-pixbuf2-develUpgrade gvfs-archiveUpgrade gtk3-immodules-debuginfoUpgrade gvfs-afp-debuginfoUpgrade chrome-gnome-shellUpgrade gdk-pixbuf2Upgrade gnome-softwareUpgrade gjs-debugsourceUpgrade appstream-dataUpgrade webkit2gtk3-debuginfoUpgrade webkit2gtk3-jscUpgrade plymouth-devel-debuginfoUpgrade pidgin-debugsourceUpgrade gsettings-desktop-schemasUpgrade webkit2gtk3Upgrade gvfs-gphoto2 | Sep 17, 2020 | Jan 14, 2019 |
| Debian | — | Upgrade webkit2gtk | Jul 30, 2024 | Jan 14, 2019 |
| Freebsd | — | Upgrade webkit2-gtk3 | Jul 7, 2019 | Jul 6, 2019 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Sep 9, 2019 | Jan 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade webkitgtk3 | Feb 22, 2021 | Jan 14, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade webkitgtk3 | Jan 20, 2021 | Jan 14, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade webkitgtk4-develUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-plugin-process-gtk2Upgrade webkitgtk4Upgrade webkitgtk4-jsc | Nov 19, 2019 | Jan 14, 2019 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.24.4-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Jan 14, 2019 |
| Oracle_linux | — | Upgrade webkitgtk4-jsc-develUpgrade webkitgtk4Upgrade webkitgtk4-develUpgrade webkitgtk4-docUpgrade webkitgtk4-jsc | Oct 7, 2020 | Sep 11, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jan 14, 2019 |
| Redhat_linux | — | Upgrade plymouth-plugin-fade-throbberUpgrade pidginUpgrade webkitgtk4-develUpgrade webkit2gtk3-plugin-process-gtk2Upgrade webkit2gtk3-devel-debuginfoUpgrade mutter-tests-debuginfoUpgrade nautilusUpgrade gvfs-afpUpgrade webkitgtk4-docUpgrade evince-libsUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gnome-shell-debugsourceUpgrade gvfs-afp-debuginfoUpgrade file-roller-debugsourceUpgrade plymouth-plugin-script-debuginfoUpgrade gnome-desktop3Upgrade plymouth-theme-solarUpgrade webkit2gtk3-debuginfoUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade evince-nautilus-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gtk3-immodules-debuginfoUpgrade webkitgtk4-jscUpgrade pango-tests-debuginfoUpgrade gdmUpgrade nautilus-debugsourceUpgrade mozjs60-debuginfoUpgrade webkit2gtk3Upgrade gnome-control-center-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shellUpgrade gvfs-archive-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gnome-desktop3-debuginfoUpgrade pango-develUpgrade gnome-desktop3-tests-debuginfoUpgrade gjs-tests-debuginfoUpgrade pango-debugsourceUpgrade gtk3-immodule-ximUpgrade gnome-desktop3-develUpgrade gnome-settings-daemonUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-shell-extension-commonUpgrade plymouth-debugsourceUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade libpurple-develUpgrade gnome-shell-extension-launch-new-instanceUpgrade mutter-develUpgrade webkit2gtk3-debugsourceUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-places-menuUpgrade pidgin-debugsourceUpgrade gnome-shell-extension-drive-menuUpgrade gvfs-afc-debuginfoUpgrade gdk-pixbuf2-xlib-develUpgrade mutter-debugsourceUpgrade plymouth-plugin-label-debuginfoUpgrade gvfs-archiveUpgrade mozjs60-develUpgrade plymouth-plugin-throbgressUpgrade webkit2gtk3-jsc-develUpgrade finch-debuginfoUpgrade wayland-protocols-develNo solution existsUpgrade evince-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade gvfs-mtp-debuginfoUpgrade chrome-gnome-shellUpgrade gnome-shell-debuginfoUpgrade evinceUpgrade gsettings-desktop-schemas-develUpgrade SDL-debugsourceUpgrade SDL-develUpgrade gtk3-immodule-xim-debuginfoUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade evince-libs-debuginfoUpgrade webkitgtk4Upgrade plymouth-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade plymouth-theme-spinnerUpgrade SDLUpgrade gnome-shell-extension-systemMonitorUpgrade gtk3-debuginfoUpgrade gdm-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade nautilus-debuginfoUpgrade gnome-classic-sessionUpgrade gdk-pixbuf2-modulesUpgrade plymouth-scriptsUpgrade gnome-tweaksUpgrade plymouth-theme-spinfinityUpgrade plymouth-graphics-libs-debuginfoUpgrade gdk-pixbuf2Upgrade plymouth-plugin-two-step-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade baobab-debugsourceUpgrade libpurpleUpgrade gjs-develUpgrade gvfs-smb-debuginfoUpgrade webkit2gtk3-jscUpgrade nautilus-extensions-debuginfoUpgrade gjsUpgrade plymouth-core-libsUpgrade plymouth-plugin-labelUpgrade gnome-software-editorUpgrade plymouth-theme-scriptUpgrade gnome-shell-extension-dash-to-dockUpgrade appstream-dataUpgrade gvfs-gphoto2Upgrade baobab-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gdk-pixbuf2-xlibUpgrade baobabUpgrade gdk-pixbuf2-debuginfoUpgrade gnome-software-debuginfoUpgrade libpurple-debuginfoUpgrade plymouth-devel-debuginfoUpgrade gvfs-goa-debuginfoUpgrade accountsservice-debugsourceUpgrade gdk-pixbuf2-tests-debuginfoUpgrade pidgin-perl-debuginfoUpgrade evince-browser-pluginUpgrade gnome-control-center-debuginfoUpgrade gvfsUpgrade gnome-shell-extension-user-themeUpgrade pidgin-debuginfoUpgrade plymouth-core-libs-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-desktop-iconsUpgrade plymouth-plugin-space-flares-debuginfoUpgrade nautilus-extensionsUpgrade webkitgtk4-jsc-develUpgrade gnome-shell-extension-top-iconsUpgrade SDL-debuginfoUpgrade mozjs60-debugsourceUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-updates-dialogUpgrade gjs-debuginfoUpgrade gdm-debuginfoUpgrade plymouth-plugin-scriptUpgrade evince-debugsourceUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk3Upgrade gvfs-debuginfoUpgrade pangoUpgrade gvfs-afcUpgrade gnome-shell-extension-panel-favoritesUpgrade gvfs-client-debuginfoUpgrade gnome-desktop3-debugsourceUpgrade mozjs60Upgrade gvfs-debugsourceUpgrade gnome-softwareUpgrade webkitgtk4-debuginfoUpgrade plymouth-graphics-libsUpgrade accountsservice-develUpgrade gnome-remote-desktop-debuginfoUpgrade gtk3-tests-debuginfoUpgrade plymouth-plugin-throbgress-debuginfoUpgrade gnome-control-center-filesystemUpgrade pango-debuginfoUpgrade gvfs-smbUpgrade gnome-software-editor-debuginfoUpgrade gtk3-devel-debuginfoUpgrade accountsserviceUpgrade pidgin-develUpgrade plymouthUpgrade gnome-shell-extension-window-grouperUpgrade libpurple-perl-debuginfoUpgrade gnome-remote-desktopUpgrade mutter-debuginfoUpgrade plymouth-theme-chargeUpgrade evince-nautilusUpgrade gvfs-mtpUpgrade file-roller-debuginfoUpgrade plymouth-plugin-two-stepUpgrade libpurple-tcl-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade gnome-shell-extension-window-listUpgrade file-rollerUpgrade gnome-settings-daemon-debuginfoUpgrade gvfs-clientUpgrade gnome-software-debugsourceUpgrade plymouth-system-themeUpgrade mutterUpgrade gjs-debugsourceUpgrade gvfs-goaUpgrade webkit2gtk3-develUpgrade gnome-control-centerUpgrade gtk-update-icon-cacheUpgrade gvfs-gphoto2-debuginfoUpgrade gdk-pixbuf2-develUpgrade gtk3-develUpgrade gvfs-develUpgrade accountsservice-debuginfoUpgrade gvfs-fuseUpgrade nautilus-develUpgrade gdk-pixbuf2-devel-debuginfoUpgrade plymouth-theme-fade-inUpgrade plymouth-plugin-space-flaresUpgrade gnome-settings-daemon-debugsourceUpgrade accountsservice-libs | Sep 17, 2020 | Jan 14, 2019 |
| Rocky_linux | — | Upgrade pidginUpgrade libpurple-develUpgrade pango-debugsourceUpgrade libpurple-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade libpurpleUpgrade gdk-pixbuf2Upgrade gnome-desktop3Upgrade gnome-desktop3-debugsourceUpgrade gdk-pixbuf2-debuginfoUpgrade pidgin-develUpgrade gnome-desktop3-debuginfoUpgrade gnome-desktop3-develUpgrade gdk-pixbuf2-develUpgrade pango-develUpgrade pangoUpgrade pidgin-debuginfoUpgrade pango-debuginfoUpgrade gdk-pixbuf2-xlibUpgrade pidgin-debugsourceUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-xlib-devel | Mar 12, 2024 | Jan 14, 2019 |
| Suse | — | Upgrade typelib-1_0-webkit2webextension-4_0Upgrade webkit-jsc-4Upgrade webkit2gtk3-develUpgrade libwebkit2gtk-4_0-37Upgrade typelib-1_0-webkit2-4_0Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade libwebkit2gtk-4_0-37-32bitUpgrade webkit2gtk3-plugin-process-gtk2Upgrade webkit2gtk-4_0-injected-bundlesUpgrade typelib-1_0-javascriptcore-4_0Upgrade libjavascriptcoregtk-4_0-18Upgrade webkit2gtk3-minibrowserUpgrade libwebkit2gtk3-lang | May 7, 2019 | Jan 14, 2019 |
| Ubuntu | — | Upgrade libwebkit2gtk-4.0-37Upgrade libjavascriptcoregtk-4.0-18 | Apr 25, 2019 | Jan 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub