ID CVE-2021-28117
Summary libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially dangerous URLs (that are neither https:// nor http://) based on the content of the store.kde.org web site. (5.18.7 is also a fixed version.)
References
Vulnerable Configurations
  • cpe:2.3:a:kde:discover:5.4.95:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.4.95:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.5.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.5.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.5.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.5.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.5.95:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.5.95:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.6.95:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.6.95:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.7.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.7.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.7.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.7.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.7.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.7.95:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.7.95:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.8.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.8.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.8.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.8.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.8.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.8.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.8.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.8.6:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.8.6:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.8.7:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.8.7:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.8.8:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.8.8:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.8.9:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.8.9:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.8.95:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.8.95:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.9.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.9.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.9.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.9.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.9.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.9.95:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.9.95:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.10.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.10.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.10.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.10.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.10.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.10.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.10.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.10.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.10.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.10.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.10.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.10.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.10.95:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.10.95:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.11.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.11.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.11.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.11.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.11.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.11.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.11.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.11.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.11.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.11.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.11.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.11.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.11.95:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.11.95:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.12.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.12.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.12.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.12.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.12.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.12.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.12.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.12.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.12.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.12.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.12.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.12.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.12.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.12.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.12.6:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.12.6:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.12.7:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.12.7:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.12.8:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.12.8:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.12.9:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.12.9:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.12.90:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.12.90:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.13.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.13.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.13.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.13.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.13.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.13.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.13.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.13.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.13.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.13.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.13.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.13.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.13.90:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.13.90:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.14.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.14.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.14.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.14.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.14.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.14.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.14.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.14.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.14.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.14.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.14.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.14.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.14.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.14.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.14.90:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.14.90:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.15.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.15.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.15.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.15.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.15.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.15.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.15.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.15.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.15.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.15.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.15.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.15.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.15.90:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.15.90:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.16.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.16.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.16.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.16.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.16.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.16.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.16.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.16.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.16.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.16.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.16.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.16.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.16.90:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.16.90:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.17.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.17.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.17.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.17.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.17.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.17.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.17.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.17.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.17.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.17.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.17.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.17.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.17.90:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.17.90:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.18.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.18.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.18.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.18.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.18.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.18.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.18.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.18.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.18.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.18.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.18.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.18.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.18.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.18.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.18.6:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.18.6:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.18.90:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.18.90:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.19.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.19.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.19.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.19.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.19.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.19.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.19.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.19.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.19.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.19.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.19.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.19.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.19.90:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.19.90:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.20.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.20.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.20.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.20.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.20.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.20.2:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.20.3:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.20.3:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.20.4:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.20.4:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.20.5:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.20.5:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.20.90:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.20.90:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.21.0:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.21.0:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.21.1:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.21.1:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:discover:5.21.2:*:*:*:*:*:*:*
    cpe:2.3:a:kde:discover:5.21.2:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 15-10-2024 - 18:35)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:P/A:N
Last major update 15-10-2024 - 18:35
Published 20-03-2021 - 21:15
Last modified 15-10-2024 - 18:35
Back to Top