CVE-2018-19516

MEDIUM 5.3CVE-2018-19516 · Published 12/03/2020 · updated 17/06/2026

Package	Affected versions	Patched versions
kde applications kde	`< 18.12`	`18.12`

Description

messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restrict the handling of an http-equiv="REFRESH" value.

References

cgit.kde.org/messagelib.git/commit/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free