CVE-2024-1433

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-1433
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-1433.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-1433
Downstream
Published
2024-02-11T23:00:07Z
Modified
2026-08-18T17:26:30Z
Severity
  • 3.1 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N CVSS Calculator
Summary
KDE Plasma Workspace Theme File eventpluginsmanager.cpp enabledPlugins path traversal
Details

A vulnerability, which was classified as problematic, was found in KDE Plasma Workspace up to 5.93.0. This affects the function EventPluginsManager::enabledPlugins of the file components/calendar/eventpluginsmanager.cpp of the component Theme File Handler. The manipulation of the argument pluginId leads to path traversal. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The patch is named 6cdf42916369ebf4ad5bd876c4dfa0170d7b2f01. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-253407. NOTE: This requires write access to user's home or the installation of third party global themes.

Database specific 
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-22"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/1xxx/CVE-2024-1433.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "5.28"
                },
                {
                    "last_affected":  "5.28"
                },
                {
                    "introduced":  "5.29"
                },
                {
                    "last_affected":  "5.29"
                },
                {
                    "introduced":  "5.30"
                },
                {
                    "last_affected":  "5.30"
                },
                {
                    "introduced":  "5.31"
                },
                {
                    "last_affected":  "5.31"
                },
                {
                    "introduced":  "5.32"
                },
                {
                    "last_affected":  "5.32"
                },
                {
                    "introduced":  "5.33"
                },
                {
                    "last_affected":  "5.33"
                },
                {
                    "introduced":  "5.34"
                },
                {
                    "last_affected":  "5.34"
                },
                {
                    "introduced":  "5.35"
                },
                {
                    "last_affected":  "5.35"
                },
                {
                    "introduced":  "5.36"
                },
                {
                    "last_affected":  "5.36"
                },
                {
                    "introduced":  "5.37"
                },
                {
                    "last_affected":  "5.37"
                },
                {
                    "introduced":  "5.38"
                },
                {
                    "last_affected":  "5.38"
                },
                {
                    "introduced":  "5.39"
                },
                {
                    "last_affected":  "5.39"
                },
                {
                    "introduced":  "5.40"
                },
                {
                    "last_affected":  "5.40"
                },
                {
                    "introduced":  "5.41"
                },
                {
                    "last_affected":  "5.41"
                },
                {
                    "introduced":  "5.42"
                },
                {
                    "last_affected":  "5.42"
                },
                {
                    "introduced":  "5.43"
                },
                {
                    "last_affected":  "5.43"
                },
                {
                    "introduced":  "5.44"
                },
                {
                    "last_affected":  "5.44"
                },
                {
                    "introduced":  "5.45"
                },
                {
                    "last_affected":  "5.45"
                },
                {
                    "introduced":  "5.46"
                },
                {
                    "last_affected":  "5.46"
                },
                {
                    "introduced":  "5.47"
                },
                {
                    "last_affected":  "5.47"
                },
                {
                    "introduced":  "5.48"
                },
                {
                    "last_affected":  "5.48"
                },
                {
                    "introduced":  "5.49"
                },
                {
                    "last_affected":  "5.49"
                },
                {
                    "introduced":  "5.50"
                },
                {
                    "last_affected":  "5.50"
                },
                {
                    "introduced":  "5.51"
                },
                {
                    "last_affected":  "5.51"
                },
                {
                    "introduced":  "5.52"
                },
                {
                    "last_affected":  "5.52"
                },
                {
                    "introduced":  "5.53"
                },
                {
                    "last_affected":  "5.53"
                },
                {
                    "introduced":  "5.54"
                },
                {
                    "last_affected":  "5.54"
                },
                {
                    "introduced":  "5.55"
                },
                {
                    "last_affected":  "5.55"
                },
                {
                    "introduced":  "5.56"
                },
                {
                    "last_affected":  "5.56"
                },
                {
                    "introduced":  "5.57"
                },
                {
                    "last_affected":  "5.57"
                },
                {
                    "introduced":  "5.58"
                },
                {
                    "last_affected":  "5.58"
                },
                {
                    "introduced":  "5.59"
                },
                {
                    "last_affected":  "5.59"
                },
                {
                    "introduced":  "5.60"
                },
                {
                    "last_affected":  "5.60"
                },
                {
                    "introduced":  "5.61"
                },
                {
                    "last_affected":  "5.61"
                },
                {
                    "introduced":  "5.62"
                },
                {
                    "last_affected":  "5.62"
                },
                {
                    "introduced":  "5.63"
                },
                {
                    "last_affected":  "5.63"
                },
                {
                    "introduced":  "5.64"
                },
                {
                    "last_affected":  "5.64"
                },
                {
                    "introduced":  "5.65"
                },
                {
                    "last_affected":  "5.65"
                },
                {
                    "introduced":  "5.66"
                },
                {
                    "last_affected":  "5.66"
                },
                {
                    "introduced":  "5.67"
                },
                {
                    "last_affected":  "5.67"
                },
                {
                    "introduced":  "5.68"
                },
                {
                    "last_affected":  "5.68"
                },
                {
                    "introduced":  "5.69"
                },
                {
                    "last_affected":  "5.69"
                },
                {
                    "introduced":  "5.70"
                },
                {
                    "last_affected":  "5.70"
                },
                {
                    "introduced":  "5.71"
                },
                {
                    "last_affected":  "5.71"
                },
                {
                    "introduced":  "5.72"
                },
                {
                    "last_affected":  "5.72"
                },
                {
                    "introduced":  "5.73"
                },
                {
                    "last_affected":  "5.73"
                },
                {
                    "introduced":  "5.74"
                },
                {
                    "last_affected":  "5.74"
                },
                {
                    "introduced":  "5.75"
                },
                {
                    "last_affected":  "5.75"
                },
                {
                    "introduced":  "5.76"
                },
                {
                    "last_affected":  "5.76"
                },
                {
                    "introduced":  "5.77"
                },
                {
                    "last_affected":  "5.77"
                },
                {
                    "introduced":  "5.78"
                },
                {
                    "last_affected":  "5.78"
                },
                {
                    "introduced":  "5.79"
                },
                {
                    "last_affected":  "5.79"
                },
                {
                    "introduced":  "5.80"
                },
                {
                    "last_affected":  "5.80"
                },
                {
                    "introduced":  "5.81"
                },
                {
                    "last_affected":  "5.81"
                },
                {
                    "introduced":  "5.82"
                },
                {
                    "last_affected":  "5.82"
                },
                {
                    "introduced":  "5.83"
                },
                {
                    "last_affected":  "5.83"
                },
                {
                    "introduced":  "5.84"
                },
                {
                    "last_affected":  "5.84"
                },
                {
                    "introduced":  "5.85"
                },
                {
                    "last_affected":  "5.85"
                },
                {
                    "introduced":  "5.86"
                },
                {
                    "last_affected":  "5.86"
                },
                {
                    "introduced":  "5.87"
                },
                {
                    "last_affected":  "5.87"
                },
                {
                    "introduced":  "5.88"
                },
                {
                    "last_affected":  "5.88"
                },
                {
                    "introduced":  "5.89"
                },
                {
                    "last_affected":  "5.89"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/kde/plasma-workspace

Affected ranges

Type
GIT
Repo
https://github.com/kde/plasma-workspace
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
6cdf42916369ebf4ad5bd876c4dfa0170d7b2f01
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:kde:plasma-workspace:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "last_affected":  "5.93.0"
        }
    ],
    "source":  [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

5.*
5.0
5.1
5.10
5.11
5.12
5.13
5.14
5.15
5.16
5.17
5.18
5.19
5.2
5.20
5.21
5.22
5.23
5.24
5.25
5.26
5.27
5.3
5.4
5.5
5.6
5.7
5.8
5.9
5.90
5.91
5.92
5.93
v4.*
v4.96.0
v4.97.0
v4.98.0
v5.*
v5.0.0
v5.0.95
v5.1.95
v5.11.95
v5.12.90
v5.13.90
v5.14.90
v5.15.90
v5.16.90
v5.17.90
v5.18.90
v5.19.90
v5.2.95
v5.20.90
v5.21.90
v5.22.90
v5.23.90
v5.24.90
v5.25.90
v5.26.90
v5.27.80
v5.3.95
v5.4.95
v5.5.0
v5.5.1
v5.5.2
v5.5.3
v5.5.4
v5.5.95
v5.7.95
v5.8.95
v5.9.95
v5.90.0
v5.91.0
v5.92.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-1433.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "279606566870875631860544971438337704429",
            "length":  1358
        },
        "id":  "CVE-2024-1433-257fba62",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/kde/plasma-workspace/commit/6cdf42916369ebf4ad5bd876c4dfa0170d7b2f01",
        "target":  {
            "file":  "components/calendar/eventpluginsmanager.cpp",
            "function":  "EventPluginsManager::loadPlugin"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "153259459830839727386709227660223262369",
                "196968847976321179737479555841409914391",
                "240091221761429669563340059781325255973",
                "54393385291603418381014105020527916161"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2024-1433-f63d09a0",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/kde/plasma-workspace/commit/6cdf42916369ebf4ad5bd876c4dfa0170d7b2f01",
        "target":  {
            "file":  "components/calendar/eventpluginsmanager.cpp"
        }
    }
]
vanir_signatures_modified 
"2026-08-18T17:26:30Z"