CVE-2025-55014

Medium

The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11 selection to the…

mitre·CWE-402·Published 2025-08-04

CVSS

4.7

EPSS

0.00

KEV

Exploits

cve.orgen

194 chars

The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11 selection to the dict.youdao.com and dict.cn servers via cleartext HTTP.

NVDen

194 chars

The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11 selection to the dict.youdao.com and dict.cn servers via cleartext HTTP.

NVDes

226 chars

El complemento YouDao para StarDict, tal como se usa en stardict 3.0.7+git20220909+dfsg-6 en Debian trixie y en otros lugares, envía una selección X11 a los servidores dict.youdao.com y dict.cn a través de HTTP de texto plano.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	4.7	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
3.1	Primary	cve.org	4.7	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N