CVE catalog

CVE-2021-28117

plasma-discover: CVE-2021-28117

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.56% · Oct 25, 2026

libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially dangerous URLs (that are neither https:// nor http://) based on the content of the store.kde.org web site. (5.18.7 is also a fixed version.)

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianplasma-discoversid6.7.4-3fixed
Debianplasma-discoverforky6.7.4-3fixed
Debianplasma-discovertrixie6.3.6-1fixed
Debianplasma-discoverbookworm5.27.5-2+deb12u1fixed
Ubuntuplasma-discover16.045.5.4-0ubuntu1vulnerable
Ubuntuplasma-discover16.045.5.5-0ubuntu1vulnerable
Ubuntuplasma-discover16.045.5.5-0ubuntu2vulnerable
Ubuntuplasma-discover16.045.6.2-1ubuntu1vulnerable
Ubuntuplasma-discover16.045.6.2-1ubuntu1.1vulnerable
Ubuntuplasma-discover18.045.10.5-0ubuntu1vulnerable
Ubuntuplasma-discover18.045.11.3-0ubuntu1vulnerable
Ubuntuplasma-discover18.045.11.4-0ubuntu1vulnerable
Ubuntuplasma-discover18.045.11.5-0ubuntu1vulnerable
Ubuntuplasma-discover18.045.12.0-0ubuntu1vulnerable
Ubuntuplasma-discover18.045.12.0-0ubuntu2vulnerable
Ubuntuplasma-discover18.045.12.1-0ubuntu1vulnerable
Ubuntuplasma-discover18.045.12.1-0ubuntu2vulnerable
Ubuntuplasma-discover18.045.12.2-0ubuntu1vulnerable
Ubuntuplasma-discover18.045.12.2-0ubuntu2vulnerable
Ubuntuplasma-discover18.045.12.3-0ubuntu1vulnerable
Ubuntuplasma-discover18.045.12.4-0ubuntu1vulnerable
Ubuntuplasma-discover18.045.12.5-0ubuntu0.1vulnerable
Ubuntuplasma-discover18.045.12.5.1-0ubuntu0.1vulnerable
Ubuntuplasma-discover18.045.12.6-0ubuntu0.1vulnerable
Ubuntuplasma-discover18.045.12.7-0ubuntu0.1vulnerable
Ubuntuplasma-discover18.045.12.8-0ubuntu0.1vulnerable
Ubuntuplasma-discover20.045.16.5-0ubuntu1vulnerable
Ubuntuplasma-discover20.045.17.2-0ubuntu1vulnerable
Ubuntuplasma-discover20.045.17.3-0ubuntu1vulnerable
Ubuntuplasma-discover20.045.17.4-0ubuntu1vulnerable
Ubuntuplasma-discover20.045.17.5-0ubuntu1vulnerable
Ubuntuplasma-discover20.045.17.90-0ubuntu1vulnerable
Ubuntuplasma-discover20.045.17.90-0ubuntu2vulnerable
Ubuntuplasma-discover20.045.18.0-0ubuntu1vulnerable
Ubuntuplasma-discover20.045.18.1-0ubuntu1vulnerable
Ubuntuplasma-discover20.045.18.2-0ubuntu1vulnerable
Ubuntuplasma-discover20.045.18.2-0ubuntu2vulnerable
Ubuntuplasma-discover20.045.18.3-0ubuntu1vulnerable
Ubuntuplasma-discover20.045.18.4.1-0ubuntu1vulnerable
Ubuntuplasma-discover20.045.18.5-0ubuntu0.1vulnerable
Ubuntuplasma-discover20.045.18.7-0ubuntu0.1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianplasma-discoversourcesid5.20.5-3not yet assignedNot reportedNot reported
Debianplasma-discoversourceforky5.20.5-3not yet assignedNot reportedNot reported
Debianplasma-discoversourcetrixie5.20.5-3not yet assignedNot reportedNot reported
Debianplasma-discoversourcebookworm5.20.5-3not yet assignedNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [kde-config-updates]Fixed

    Source package: [plasma-discover]

    Details (2)

    • 5.27.5-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · bookworm; dsa · plasma-discover · debian · 12

    • 5.27.5-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · bookworm; dsa · plasma-discover · debian · 12

  • [plasma-discover]Fixed
    Details (2)

    • 5.27.5-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · bookworm; dsa · plasma-discover · debian · 12

    • 5.27.5-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · bookworm; dsa · plasma-discover · debian · 12

  • [plasma-discover-backend-flatpak]Fixed

    Source package: [plasma-discover]

    Details (2)

    • 5.27.5-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · bookworm; dsa · plasma-discover · debian · 12

    • 5.27.5-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · bookworm; dsa · plasma-discover · debian · 12

  • [plasma-discover-backend-fwupd]Fixed

    Source package: [plasma-discover]

    Details (2)

    • 5.27.5-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · bookworm; dsa · plasma-discover · debian · 12

    • 5.27.5-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · bookworm; dsa · plasma-discover · debian · 12

  • [plasma-discover-backend-snap]Fixed

    Source package: [plasma-discover]

    Details (2)

    • 5.27.5-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · bookworm; dsa · plasma-discover · debian · 12

    • 5.27.5-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · bookworm; dsa · plasma-discover · debian · 12

  • [plasma-discover-common]Fixed

    Source package: [plasma-discover]

    Details (2)

    • 5.27.5-2+deb12u1 · all · bookworm

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · bookworm; dsa · plasma-discover · debian · 12

    • 5.27.5-2+deb12u1 · all · bookworm

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · bookworm; dsa · plasma-discover · debian · 12

[Debian 13 (Trixie)]

  • [kde-config-updates]Fixed

    Source package: [plasma-discover]

    Details (2)

    • 6.3.6-1 · amd64 · trixie

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · 13

    • 6.3.6-1 · arm64 · trixie

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · 13

  • [plasma-discover]Fixed
    Details (2)

    • 6.3.6-1 · amd64 · trixie

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · 13

    • 6.3.6-1 · arm64 · trixie

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · 13

  • [plasma-discover-backend-flatpak]Fixed

    Source package: [plasma-discover]

    Details (2)

    • 6.3.6-1 · amd64 · trixie

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · 13

    • 6.3.6-1 · arm64 · trixie

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · 13

  • [plasma-discover-backend-fwupd]Fixed

    Source package: [plasma-discover]

    Details (2)

    • 6.3.6-1 · amd64 · trixie

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · 13

    • 6.3.6-1 · arm64 · trixie

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · 13

  • [plasma-discover-backend-snap]Fixed

    Source package: [plasma-discover]

    Details (2)

    • 6.3.6-1 · amd64 · trixie

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · 13

    • 6.3.6-1 · arm64 · trixie

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · 13

  • [plasma-discover-common]Fixed

    Source package: [plasma-discover]

    Details (2)

    • 6.3.6-1 · all · trixie

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · 13

    • 6.3.6-1 · all · trixie

      Fixed · Fixed: 5.20.5-3

      dsa · plasma-discover · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]