CVE-2024-1433

A vulnerability, which was classified as problematic, was found in KDE Plasma Workspace up to 5.93.0. This affects the function EventPluginsManager::enabledPlugins of the file components/calendar/eventpluginsmanager.cpp of the component Theme File Handler. The manipulation of the argument pluginId leads to path traversal. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The patch is named 6cdf42916369ebf4ad5bd876c4dfa0170d7b2f01. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-253407. NOTE: This requires write access to user's home or the installation of third party global themes.

• CWE-22

• https://github.com/KDE/plasma-workspace/commit/6cdf42916369ebf4ad5bd876c4dfa0170d7b2f01Patch
• https://vuldb.com/?ctiid.253407Permissions Required
• https://vuldb.com/?id.253407Third Party Advisory
• https://github.com/KDE/plasma-workspace/commit/6cdf42916369ebf4ad5bd876c4dfa0170d7b2f01Patch
• https://vuldb.com/?ctiid.253407Permissions Required
• https://vuldb.com/?id.253407Third Party Advisory

Published

Feb 11, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1427The The Post Grid – Shortcode, Gutenberg Blocks and Elemento…5.4
• CVE-2024-1428The Element Pack Elementor Addons (Header Footer, Free Templ…5.4
• CVE-2024-1429The Element Pack Elementor Addons (Header Footer, Free Templ…5.4
• CVE-2024-1430A vulnerability has been found in Netgear R7000 1.0.11.136_1…6.5
• CVE-2024-1431A vulnerability was found in Netgear R7000 1.0.11.136_10.2.1…6.5
• CVE-2024-1432** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in…5
• CVE-2024-1434Improper Neutralization of Input During Web Page Generation …4.8
• CVE-2024-1435Insertion of Sensitive Information Into Sent Data vulnerabil…7.5
• CVE-2024-1436Exposure of Sensitive Information to an Unauthorized Actor v…5.3
• CVE-2024-1437Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2024-1438Missing Authorization vulnerability in PressFore Rolo Slider…7.7
• CVE-2024-1439Inadequate access control in Moodle LMS. This vulnerability …3.3