What’s Vulnerable › Vulnerabilities

CVE-2020-12755

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-05-09 · updated 2026-06-17

Description

fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the keepPassword option. This may lead to unintended KWallet storage of a password.

Affected products

• KDE Kio-Extras: through 20.04.0

References

• https://commits.kde.org/kio-extras/d813cef3cecdec9af1532a40d677a203ff979145
• https://commits.kde.org/kio-extras/d813cef3cecdec9af1532a40d677a203ff979145

Get alerted when CVE-2020-12755 or the next vulnerability affects your stack