Debian/kcoreaddons: high 7.3
Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sig
Action: Upgrade kcoreaddons to 5.26.0-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.26.0-3 | - |
Fixed versions
| 5.26.0-3 |
Sources
published · modified · JSON