CVE-2018-11713

—

CVSS 3.0

6.5 medium

EPSS

2%p74

Published

Jun 4, 2018 (Jun 4, 2018)

Modified

Jun 17, 2026

Description

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by crafted web sites via a WebSocket connection.

Vendors: webkitgtk gnome
Products: webkitgtk\+, libsoup
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.