Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Konversation密码泄漏漏洞
Vulnerability Description
konversation是一款KDE包含的IRC客户端软件。 konversation存在多个安全问题，远程攻击者可以利用这些漏洞导致命令注入，密码泄露等问题。 对%-escaped变量扩展存在问题，对部分外部输入字符串的%-escaped变量也会做不注意的扩展。多个konversation包含的PERL脚本不正确处理命令行参数，可导致命令行注入。另外在快速连接对话框中昵称和密码会混肴，因此使用此对话框连接并填写密码，会导致使用密码作为昵称，泄露敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A