CVE-2018-6849

4.3

MEDIUMCVSS v2

Published

April 1, 2018

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request.

rapid7/metasploit-framework

GitHubMetasploit Framework

NVD

duckduckgo

Python Package IndexLibrary for querying the Duck Duck Go API

= 4.2.0NVD

duckduckgo

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

An unofficial DuckDuckGo search API.

= 4.2.0NVD

Security Advisories

CVE-2018-6849

Description

More on this CVE