logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2021-28117

Description

libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially dangerous URLs (that are neither https:// nor http://) based on the content of the store.kde.org web site. (5.18.7 is also a fixed version.)


Affected Package


OS OS Version Package Name Package Version
Debian 12 plasma-discover 5.25.4-2
Debian 11 plasma-discover 5.20.5-3
Debian 10 plasma-discover 5.14.5.1-1
Debian 999 plasma-discover 5.25.4-2

Related