| Package | Affected versions | Patched versions |
|---|---|---|
| kde applications | < 18.12 | 18.12 |
messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restrict the handling of an http-equiv="REFRESH" value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free