
CVE catalog
CVE-2018-6790
plasma-workspace affected and fixed versions
An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element.
- Severity
- Medium · CVSS 5.3
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 2.09% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Debiantrixie | plasma-workspace | 4:5.12.0-2 | FixedDistribution-reported fixed boundary | [CVE-2018-6790] |
| Debiantrixie | plasma-workspace | 4:6.3.6-2 | Fixed | [CVE-2018-6790] |
| Debiansid | plasma-workspace | 4:5.12.0-2 | FixedDistribution-reported fixed boundary | [CVE-2018-6790] |
| Debiansid | plasma-workspace | 4:6.7.4-2 | Fixed | [CVE-2018-6790] |
| Debianforky | plasma-workspace | 4:5.12.0-2 | FixedDistribution-reported fixed boundary | [CVE-2018-6790] |
| Debianforky | plasma-workspace | 4:6.7.4-2 | Fixed | [CVE-2018-6790] |
| Debianbookworm-security | plasma-workspace | 4:5.27.5-2+deb12u2 | Fixed | [CVE-2018-6790] |
| Debianbookworm | plasma-workspace | 4:5.12.0-2 | FixedDistribution-reported fixed boundary | [CVE-2018-6790] |
| Debianbookworm | plasma-workspace | 4:5.27.5-2+deb12u2 | Fixed | [CVE-2018-6790] |
Showing 9 fix observations. All 17 observations, including unknown and conflicting reports, are available below.
Provider details and historical evidence
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| UnknownRelease not reported | plasma-workspace | 4:5.12.0-2 | UnknownSource applicability is not established | Provider not reported |
| Debianbookworm | plasma-workspace | 4:5.12.0-2 | FixedDistribution-reported fixed boundary | [CVE-2018-6790] |
| Debianbookworm | plasma-workspace | 4:5.27.5-2+deb12u2 | Fixed | [CVE-2018-6790] |
| Debianbookworm-security | plasma-workspace | 4:5.27.5-2+deb12u2 | Fixed | [CVE-2018-6790] |
| Debianforky | plasma-workspace | 4:5.12.0-2 | FixedDistribution-reported fixed boundary | [CVE-2018-6790] |
| Debianforky | plasma-workspace | 4:6.7.4-2 | Fixed | [CVE-2018-6790] |
| Debiansid | plasma-workspace | 4:5.12.0-2 | FixedDistribution-reported fixed boundary | [CVE-2018-6790] |
| Debiansid | plasma-workspace | 4:6.7.4-2 | Fixed | [CVE-2018-6790] |
| Debiantrixie | plasma-workspace | 4:5.12.0-2 | FixedDistribution-reported fixed boundary | [CVE-2018-6790] |
| Debiantrixie | plasma-workspace | 4:6.3.6-2 | Fixed | [CVE-2018-6790] |
| Susepackage hub 12 sp3 | plasma5-workspace | 5.8.7-8.1 | UnknownSource applicability is not established | [OPENSUSE-SU-2018:0397-1][OPENSUSE-SU-2018:0398-1] |
| Ubuntupro | plasma-workspace | 4:5.4.2-0ubuntu1 | UnknownSource applicability is not established | [UBUNTU-CVE-2018-6790] |
| Ubuntupro | plasma-workspace | 4:5.4.3-0ubuntu1 | UnknownSource applicability is not established | [UBUNTU-CVE-2018-6790] |
| Ubuntupro | plasma-workspace | 4:5.5.4-0ubuntu1 | UnknownSource applicability is not established | [UBUNTU-CVE-2018-6790] |
| Ubuntupro | plasma-workspace | 4:5.5.5.2-0ubuntu1 | UnknownSource applicability is not established | [UBUNTU-CVE-2018-6790] |
| Ubuntupro | plasma-workspace | 4:5.5.5.2-0ubuntu1.1 | UnknownSource applicability is not established | [UBUNTU-CVE-2018-6790] |
| Ubuntupro | plasma-workspace | 4:5.5.5.2-0ubuntu1.1+esm1 | UnknownSource applicability is not established | [UBUNTU-CVE-2018-6790] |
Original provider fields
{
"package_releases": [
{
"name": "plasma-workspace",
"status": "fixed",
"release": "sid",
"version": "4:6.7.4-2"
},
{
"name": "plasma-workspace",
"status": "fixed",
"release": "forky",
"version": "4:6.7.4-2"
},
{
"name": "plasma-workspace",
"status": "fixed",
"release": "trixie",
"version": "4:6.3.6-2"
},
{
"name": "plasma-workspace",
"status": "fixed",
"release": "bookworm",
"version": "4:5.27.5-2+deb12u2"
},
{
"name": "plasma-workspace",
"status": "fixed",
"release": "bookworm-security",
"version": "4:5.27.5-2+deb12u2"
}
],
"fixed_versions": [
{
"bug": null,
"name": "plasma-workspace",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "4:5.12.0-2"
},
{
"bug": null,
"name": "plasma-workspace",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "4:5.12.0-2"
},
{
"bug": null,
"name": "plasma-workspace",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "4:5.12.0-2"
},
{
"bug": null,
"name": "plasma-workspace",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": "4:5.12.0-2"
}
],
"distribution_packages": [
{
"name": "plasma-workspace",
"fixed_version": "4:5.12.0-2",
"applicability_unknown": true
},
{
"name": "plasma-workspace",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "pro",
"versions": [
"4:5.4.2-0ubuntu1",
"4:5.4.3-0ubuntu1",
"4:5.5.4-0ubuntu1",
"4:5.5.5.2-0ubuntu1",
"4:5.5.5.2-0ubuntu1.1",
"4:5.5.5.2-0ubuntu1.1+esm1"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2018-6790",
"fixed_version": "",
"provider_source": "pypi",
"provider_record_id": "UBUNTU-CVE-2018-6790",
"provider_updated_at": "2026-09-28T05:30:04.776419599Z",
"applicability_unknown": true
},
{
"name": "plasma5-workspace",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.8.7-8.1"
}
]
}
],
"release": "package hub 12 sp3",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2018:0397-1",
"fixed_version": "5.8.7-8.1",
"provider_source": "pypi",
"provider_record_id": "OPENSUSE-SU-2018:0397-1",
"provider_updated_at": "2026-02-04T04:37:12.804529Z",
"applicability_unknown": true
},
{
"name": "plasma5-workspace",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.8.7-8.1"
}
]
}
],
"release": "package hub 12 sp3",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2018:0398-1",
"fixed_version": "5.8.7-8.1",
"provider_source": "pypi",
"provider_record_id": "OPENSUSE-SU-2018:0398-1",
"provider_updated_at": "2026-02-04T02:18:37.471116Z",
"applicability_unknown": true
}
]
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [libcolorcorrect5]Unknown
Source package: [plasma-workspace]
Details (4)
4:5.27.5-2+deb12u2· amd64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· amd64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
- [libkfontinst5]Unknown
Source package: [plasma-workspace]
Details (4)
4:5.27.5-2+deb12u2· amd64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· amd64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
- [libkfontinstui5]Unknown
Source package: [plasma-workspace]
Details (4)
4:5.27.5-2+deb12u2· amd64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· amd64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
- [libkworkspace5-5]Unknown
Source package: [plasma-workspace]
Details (4)
4:5.27.5-2+deb12u2· amd64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· amd64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
- [libnotificationmanager1]Unknown
Source package: [plasma-workspace]
Details (4)
4:5.27.5-2+deb12u2· amd64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· amd64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
- [libplasma-geolocation-interface5]Unknown
Source package: [plasma-workspace]
Details (4)
4:5.27.5-2+deb12u2· amd64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· amd64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
- [libtaskmanager6abi1]Unknown
Source package: [plasma-workspace]
Details (4)
4:5.27.5-2+deb12u2· amd64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· amd64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
- [libweather-ion7]Unknown
Source package: [plasma-workspace]
Details (4)
4:5.27.5-2+deb12u2· amd64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· amd64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
- [plasma-workspace]Unknown
Details (4)
4:5.27.5-2+deb12u2· amd64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· amd64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
- [plasma-workspace-data]Unknown
Source package: [plasma-workspace]
Details (4)
4:5.27.5-2+deb12u2· all · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· all · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· all · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· all · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
- [plasma-workspace-dev]Unknown
Source package: [plasma-workspace]
Details (4)
4:5.27.5-2+deb12u2· amd64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· amd64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
- [plasma-workspace-wayland]Unknown
Source package: [plasma-workspace]
Details (4)
4:5.27.5-2+deb12u2· amd64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· amd64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
- [sddm-theme-breeze]Unknown
Source package: [plasma-workspace]
Details (4)
4:5.27.5-2+deb12u2· amd64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· amd64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
- [sddm-theme-debian-breeze]Unknown
Source package: [plasma-workspace]
Details (4)
4:5.27.5-2+deb12u2· amd64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookwormFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· amd64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
4:5.27.5-2+deb12u2· arm64 · bookworm-securityFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12
[Debian 13 (Trixie)]
- [libbatterycontrol6]Unknown
Source package: [plasma-workspace]
Details (2)
4:6.3.6-2· amd64 · trixieFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · 13
4:6.3.6-2· arm64 · trixieFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · 13
- [libcolorcorrect6]Unknown
Source package: [plasma-workspace]
Details (2)
4:6.3.6-2· amd64 · trixieFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · 13
4:6.3.6-2· arm64 · trixieFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · 13
- [libkfontinst6]Unknown
Source package: [plasma-workspace]
Details (2)
4:6.3.6-2· amd64 · trixieFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · 13
4:6.3.6-2· arm64 · trixieFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · 13
- [libkfontinstui6]Unknown
Source package: [plasma-workspace]
Details (2)
4:6.3.6-2· amd64 · trixieFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · 13
4:6.3.6-2· arm64 · trixieFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · 13
- [libklipper6]Unknown
Source package: [plasma-workspace]
Details (2)
4:6.3.6-2· amd64 · trixieFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · 13
4:6.3.6-2· arm64 · trixieFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · 13
- [libkmpris6]Unknown
Source package: [plasma-workspace]
Details (2)
4:6.3.6-2· amd64 · trixieFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · 13
4:6.3.6-2· arm64 · trixieFixed · Fixed:
4:5.12.0-2dsa · plasma-workspace · debian · 13
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2019_2141.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2018-6790]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2018-6790]
- [https://osv.dev/vulnerability/openSUSE-SU-2018:0397-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2018:0398-1]
- [https://security-tracker.debian.org/tracker/CVE-2018-6790]
- [https://security.access.redhat.com/data/csaf/v2/vex/2018/cve-2018-6790.json]
[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]