QwikSec

Security Database

CVE

CWE

Training

CVE-2018-11713

Published: Jun 4, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by crafted web sites via a WebSocket connection.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://trac.webkit.org/changeset/228088/webkit

x_refsource_MISC

vendor-advisory

x_refsource_GENTOO

https://bugs.webkit.org/show_bug.cgi?id=126384

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.