Kde Kio-Extras vulnerabilities

2 CVEs affecting Kde Kio-Extras, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-12755, published 2020-05-09.

More from Kde.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-8600, published 2014-12-08. Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in KDE-Runtime 4.14.3 and earlier, kwebkitpart 1.3.4 and earlier, and kio-extras 5.1.1 and earlier allow remote attackers to inject arbitrary web…
• CVE-2020-12755, published 2020-05-09. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the keepPassword option. This may lead to unintended…