Approved changes feed: RSS · Atom

cpe:2.3:a:kde:discover:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKde (d8ba08cf-7ec1-5504-a5b9-f8cfa50ca850)
ProductDiscover (c474d767-a1a2-53ae-b5dd-f60df9191bbf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/plasma-discover purl2cpe 2026-06-01 10:14:06.002119
pkg:deb/ubuntu/plasma-discover purl2cpe 2026-06-01 10:14:06.002122
pkg:github/kde/discover purl2cpe 2026-06-01 10:14:06.002125
pkg:rpm/fedora/plasma-discover purl2cpe 2026-06-01 10:14:06.002128
pkg:rpm/opensuse/discover purl2cpe 2026-06-01 10:14:06.002131

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28117 vulnerable 2026-06-03 14:44:17.246647 Details available
libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially dangerous URLs (that are neither https:// nor http://) based on the content of the store.kde.org web site. (5.18.7 is also a fixed version.)
Published: 2021-03-20T00:00:00.000Z
Updated: 2024-10-15T18:08:32.926Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.