| Package | Affected versions | Patched versions |
|---|---|---|
| kio-extras | ≤ 20.04.0 |
fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the keepPassword option. This may lead to unintended KWallet storage of a password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free