Debian/kmail-account-wizard: medium 5.9
ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.ex
Action: Upgrade kmail-account-wizard to 4:22.12.3-1+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4:22.12.3-1+deb12u1 | - |
Fixed versions
| 4:22.12.3-1+deb12u1 |
Sources
published · modified · JSON