The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address.
[ { "events": [ { "introduced": "0" }, { "fixed": "18.12.0" } ] } ]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-19120.json"