Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-99pq-r374-7jh3

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled.

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled.

EPSS

Процентиль: 78%
0.0192
Низкий

8.1 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 8.1
ubuntu
больше 9 лет назад

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled.

CVSS3: 6.3
redhat
почти 10 лет назад

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled.

CVSS3: 8.1
nvd
больше 9 лет назад

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled.

CVSS3: 8.1
debian
больше 9 лет назад

KMail since version 5.3.0 used a QWebEngine based viewer that had Java ...

EPSS

Процентиль: 78%
0.0192
Низкий

8.1 High

CVSS3

Дефекты

CWE-94