WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gdk-pixbuf2-xlib-develUpgrade libpurpleUpgrade gnome-desktop3Upgrade gdk-pixbuf2Upgrade libpurple-develUpgrade pidgin-develUpgrade gnome-desktop3-develUpgrade pidginUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-xlib | May 4, 2022 | Jan 14, 2019 |
| Alpine Linux | — | Upgrade webkit2gtk | Nov 8, 2019 | Jan 14, 2019 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-jscUpgrade webkitgtk4Upgrade webkitgtk4-develUpgrade webkitgtk4-doc | Nov 12, 2020 | Jan 14, 2019 |
| Centos_linux | — | Upgrade webkit2gtk3-devel-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade accountsservice-libsUpgrade SDLUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade gnome-shell-extension-commonUpgrade nautilus-extensionsUpgrade gnome-shell-extension-drive-menuUpgrade gtk3-tests-debuginfoUpgrade plymouth-plugin-space-flares-debuginfoUpgrade libpurple-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade nautilus-debuginfoUpgrade evince-debugsourceUpgrade libpurple-perl-debuginfoUpgrade gnome-remote-desktopUpgrade baobab-debuginfoUpgrade gvfs-develUpgrade plymouth-plugin-fade-throbberUpgrade gnome-remote-desktop-debugsourceUpgrade gtk3-debugsourceUpgrade webkitgtk4-debuginfoUpgrade mozjs60Upgrade gnome-settings-daemonUpgrade gdk-pixbuf2-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade evince-browser-pluginUpgrade accountsservice-debugsourceUpgrade plymouth-core-libsUpgrade gnome-shell-extension-panel-favoritesUpgrade plymouth-plugin-label-debuginfoUpgrade gvfs-debugsourceUpgrade gtk3-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-control-center-filesystemUpgrade gvfs-client-debuginfoUpgrade evince-nautilusUpgrade gvfs-mtpUpgrade finch-debuginfoUpgrade evince-libsUpgrade pango-debugsourceUpgrade SDL-debugsourceUpgrade mutter-debuginfoUpgrade pidgin-debuginfoUpgrade gnome-desktop3-debuginfoUpgrade nautilusUpgrade gtk3-immodule-xim-debuginfoUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-jscUpgrade gnome-shell-extension-windowsNavigatorUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-launch-new-instanceUpgrade gtk3-develUpgrade gjsUpgrade baobabUpgrade gtk-update-icon-cacheUpgrade gdk-pixbuf2-modulesUpgrade gvfs-clientUpgrade gtk3-devel-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-classic-sessionUpgrade gnome-desktop3-develUpgrade webkit2gtk3-jsc-debuginfoUpgrade webkitgtk4-docUpgrade accountsservice-debuginfoUpgrade gjs-tests-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade plymouthUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade gvfs-goaUpgrade plymouth-theme-spinnerUpgrade file-roller-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-desktop-iconsUpgrade gvfs-afcUpgrade plymouth-plugin-throbgressUpgrade webkit2gtk3-jsc-develUpgrade plymouth-plugin-two-step-debuginfoUpgrade SDL-debuginfoUpgrade libpurple-tcl-debuginfoUpgrade libpurpleUpgrade gnome-shell-extension-horizontal-workspacesUpgrade plymouth-theme-chargeUpgrade gdm-debugsourceUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gvfs-debuginfoUpgrade gnome-shellUpgrade gtk3Upgrade gvfs-afpUpgrade pidginUpgrade gnome-settings-daemon-debugsourceUpgrade gvfs-gphoto2-debuginfoUpgrade webkitgtk4Upgrade plymouth-graphics-libsUpgrade gnome-software-editorUpgrade webkit2gtk3-plugin-process-gtk2Upgrade chrome-gnome-shellUpgrade webkit2gtk3-develUpgrade evince-libs-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gnome-softwareUpgrade gvfs-archiveUpgrade gvfs-gphoto2Upgrade appstream-dataUpgrade gjs-debugsourceUpgrade plymouth-plugin-throbgress-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade plymouth-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade evince-nautilus-debuginfoUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade accountsserviceUpgrade gnome-shell-extension-systemMonitorUpgrade plymouth-plugin-script-debuginfoUpgrade mutter-debugsourceUpgrade SDL-develUpgrade plymouth-plugin-scriptUpgrade pango-tests-debuginfoUpgrade gvfs-smb-debuginfoUpgrade gnome-software-debugsourceUpgrade evince-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade gnome-shell-debugsourceUpgrade wayland-protocols-develUpgrade gjs-debuginfoUpgrade gdm-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-control-center-debuginfoUpgrade gnome-desktop3-tests-debuginfoUpgrade pango-develUpgrade gnome-shell-extension-updates-dialogUpgrade gvfs-smbUpgrade gvfs-fuseUpgrade gdk-pixbuf2-modules-debuginfoUpgrade plymouth-system-themeUpgrade baobab-debugsourceUpgrade plymouth-plugin-labelUpgrade webkit2gtk3-jscUpgrade plymouth-theme-fade-inUpgrade plymouth-debugsourceUpgrade nautilus-extensions-debuginfoUpgrade mozjs60-debugsourceUpgrade gnome-control-centerUpgrade gvfs-archive-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade evince-browser-plugin-debuginfoUpgrade gnome-control-center-debugsourceUpgrade mozjs60-debuginfoUpgrade gnome-shell-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade webkit2gtk3Upgrade pidgin-debugsourceUpgrade plymouth-theme-solarUpgrade plymouth-devel-debuginfoUpgrade webkitgtk4-develUpgrade nautilus-debugsourceUpgrade plymouth-plugin-space-flaresUpgrade pidgin-perl-debuginfoUpgrade gdmUpgrade pangoUpgrade plymouth-scriptsUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-apps-menuUpgrade plymouth-theme-scriptUpgrade gnome-desktop3-debugsourceUpgrade gdk-pixbuf2-develUpgrade gvfs-mtp-debuginfoUpgrade pango-debuginfoUpgrade file-rollerUpgrade gvfsUpgrade gnome-shell-extension-auto-move-windowsUpgrade plymouth-plugin-two-stepUpgrade gnome-tweaksUpgrade gnome-software-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade file-roller-debugsourceUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-desktop3Upgrade mutter-tests-debuginfoUpgrade gvfs-goa-debuginfoUpgrade gvfs-afc-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gsettings-desktop-schemasUpgrade plymouth-theme-spinfinityUpgrade evinceUpgrade gnome-shell-extension-user-themeUpgrade plymouth-graphics-libs-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade gvfs-afp-debuginfoUpgrade plymouth-core-libs-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2Upgrade gtk3-immodules-debuginfoUpgrade mutter | Sep 17, 2020 | Jan 14, 2019 |
| Debian | — | Upgrade webkit2gtk | Jul 30, 2024 | Jan 14, 2019 |
| Freebsd | — | Upgrade webkit2-gtk3 | Jul 7, 2019 | Jul 6, 2019 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Sep 9, 2019 | Jan 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade webkitgtk3 | Feb 22, 2021 | Jan 14, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade webkitgtk3 | Jan 20, 2021 | Jan 14, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade webkitgtk4-plugin-process-gtk2Upgrade webkitgtk4-jsc-develUpgrade webkitgtk4Upgrade webkitgtk4-jscUpgrade webkitgtk4-devel | Nov 19, 2019 | Jan 14, 2019 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.24.4-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Jan 14, 2019 |
| Oracle_linux | — | Upgrade webkitgtk4-jsc-develUpgrade webkitgtk4Upgrade webkitgtk4-jscUpgrade webkitgtk4-develUpgrade webkitgtk4-doc | Oct 7, 2020 | Sep 11, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jan 14, 2019 |
| Redhat_linux | — | Upgrade gvfs-fuseUpgrade accountsservice-libsUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gnome-shell-extension-window-listUpgrade file-rollerUpgrade gnome-software-debugsourceUpgrade plymouth-devel-debuginfoUpgrade pidgin-perl-debuginfoUpgrade gvfs-goa-debuginfoUpgrade plymouth-plugin-two-stepUpgrade gnome-remote-desktop-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade mutterUpgrade gvfs-goaUpgrade gvfsUpgrade gvfs-clientUpgrade plymouth-system-themeUpgrade plymouth-plugin-space-flaresUpgrade evince-browser-pluginUpgrade nautilus-develUpgrade webkitgtk4-jsc-develUpgrade gvfs-smbUpgrade gtk3Upgrade pango-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade plymouthUpgrade nautilus-extensionsUpgrade gtk3-devel-debuginfoUpgrade gjs-debugsourceUpgrade gnome-control-center-debuginfoUpgrade webkit2gtk3-develUpgrade gnome-remote-desktopUpgrade plymouth-plugin-throbgress-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade pangoUpgrade plymouth-core-libs-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade pidgin-develUpgrade gtk3-tests-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade mutter-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade evince-nautilusUpgrade accountsserviceUpgrade gvfs-debuginfoUpgrade libpurple-debuginfoUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gnome-control-centerUpgrade gnome-control-center-filesystemUpgrade gvfs-debugsourceUpgrade plymouth-theme-chargeUpgrade mozjs60Upgrade gnome-shell-extension-auto-move-windowsUpgrade plymouth-graphics-libsUpgrade gvfs-client-debuginfoUpgrade gvfs-afcUpgrade webkitgtk4-debuginfoUpgrade accountsservice-develUpgrade gvfs-mtpUpgrade file-roller-debuginfoUpgrade libpurple-tcl-debuginfoUpgrade gtk-update-icon-cacheUpgrade plymouth-theme-fade-inUpgrade gnome-softwareUpgrade libpurple-perl-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade plymouth-plugin-space-flares-debuginfoUpgrade gnome-desktop3-debugsourceUpgrade accountsservice-debuginfoUpgrade gdk-pixbuf2-develUpgrade evince-debugsourceUpgrade gtk3-debugsourceUpgrade gnome-shell-extension-updates-dialogUpgrade gvfs-develUpgrade gjs-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade mozjs60-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade plymouth-plugin-scriptUpgrade gnome-shell-extension-top-iconsUpgrade gvfs-gphoto2-debuginfoUpgrade SDL-debuginfoUpgrade gtk3-develUpgrade gdm-debuginfoUpgrade gvfs-gphoto2Upgrade gnome-desktop3Upgrade webkit2gtk3-jscUpgrade nautilusUpgrade webkitgtk4-jscUpgrade gdk-pixbuf2-modulesUpgrade webkit2gtk3-plugin-process-gtk2Upgrade gnome-shell-extension-screenshot-window-sizerUpgrade accountsservice-libs-debuginfoUpgrade gdk-pixbuf2-xlib-develUpgrade gnome-shell-extension-user-themeUpgrade gjs-tests-debuginfoUpgrade gnome-tweaksUpgrade pango-debugsourceUpgrade gnome-shellUpgrade gtk3-immodule-ximUpgrade gnome-shell-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade mozjs60-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade evince-browser-plugin-debuginfoUpgrade gvfs-afc-debuginfoUpgrade pango-tests-debuginfoUpgrade plymouth-plugin-throbgressUpgrade pidgin-debugsourceUpgrade gvfs-mtp-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade webkitgtk4-docUpgrade gvfs-smb-debuginfoUpgrade wayland-protocols-develUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-places-menuUpgrade gsettings-desktop-schemasUpgrade gdm-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade plymouth-scriptsUpgrade nautilus-debugsourceUpgrade gnome-remote-desktop-debugsourceUpgrade gdk-pixbuf2-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade evince-nautilus-debuginfoUpgrade gjsUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-settings-daemonUpgrade gtk3-immodules-debuginfoUpgrade gnome-control-center-debugsourceUpgrade libpurple-develUpgrade mutter-tests-debuginfoUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade evinceUpgrade gvfs-archiveUpgrade pidgin-debuginfoUpgrade gvfs-afp-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-software-editorUpgrade gtk3-debuginfoUpgrade plymouth-plugin-fade-throbberUpgrade accountsservice-debugsourceUpgrade SDLUpgrade baobab-debugsourceUpgrade mutter-debugsourceUpgrade nautilus-debuginfoUpgrade plymouth-theme-spinnerUpgrade webkitgtk4-develUpgrade evince-libsUpgrade gdk-pixbuf2-debuginfoUpgrade baobab-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade plymouth-plugin-script-debuginfoUpgrade gdmUpgrade gnome-desktop3-develUpgrade plymouth-theme-solarUpgrade webkit2gtk3-debuginfoUpgrade baobabUpgrade pidginUpgrade plymouth-plugin-label-debuginfoUpgrade SDL-develUpgrade gdk-pixbuf2Upgrade gnome-desktop3-debuginfoUpgrade gvfs-afpUpgrade SDL-debugsourceUpgrade plymouth-core-libsUpgrade webkit2gtk3Upgrade plymouth-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-windowsNavigatorUpgrade plymouth-theme-scriptUpgrade plymouth-plugin-two-step-debuginfoUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gvfs-archive-debuginfoUpgrade gjs-develUpgrade appstream-dataUpgrade plymouth-plugin-labelUpgrade libpurpleUpgrade mozjs60-develUpgrade gdk-pixbuf2-xlibUpgrade evince-libs-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade plymouth-debuginfoUpgrade evince-debuginfoUpgrade webkitgtk4Upgrade plymouth-theme-spinfinityUpgrade plymouth-graphics-libs-debuginfoUpgrade gnome-desktop3-tests-debuginfoUpgrade finch-debuginfoUpgrade chrome-gnome-shellUpgrade mutter-develUpgrade gnome-shell-extension-launch-new-instanceUpgrade pango-develUpgrade gdk-pixbuf2-modules-debuginfoNo solution existsUpgrade gnome-shell-extension-commonUpgrade gnome-classic-sessionUpgrade file-roller-debugsourceUpgrade webkit2gtk3-jsc-devel | Sep 17, 2020 | Jan 14, 2019 |
| Rocky_linux | — | Upgrade gdk-pixbuf2Upgrade libpurple-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade libpurpleUpgrade gnome-desktop3Upgrade pidginUpgrade gnome-desktop3-debuginfoUpgrade gdk-pixbuf2-debuginfoUpgrade gnome-desktop3-develUpgrade gnome-desktop3-debugsourceUpgrade pidgin-develUpgrade libpurple-develUpgrade pango-debugsourceUpgrade pangoUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-xlib-develUpgrade pidgin-debuginfoUpgrade gdk-pixbuf2-xlibUpgrade pidgin-debugsourceUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gdk-pixbuf2-modulesUpgrade pango-develUpgrade gdk-pixbuf2-modules-debuginfoUpgrade pango-debuginfo | Mar 12, 2024 | Jan 14, 2019 |
| Suse | — | Upgrade webkit2gtk-4_0-injected-bundlesUpgrade typelib-1_0-javascriptcore-4_0Upgrade webkit2gtk3-minibrowserUpgrade webkit2gtk3-plugin-process-gtk2Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade libwebkit2gtk3-langUpgrade libwebkit2gtk-4_0-37-32bitUpgrade typelib-1_0-webkit2-4_0Upgrade libjavascriptcoregtk-4_0-18Upgrade libwebkit2gtk-4_0-37Upgrade webkit-jsc-4Upgrade typelib-1_0-webkit2webextension-4_0Upgrade webkit2gtk3-devel | May 7, 2019 | Jan 14, 2019 |
| Ubuntu | — | Upgrade libwebkit2gtk-4.0-37Upgrade libjavascriptcoregtk-4.0-18 | Apr 25, 2019 | Jan 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub