Vulnerabilities > Duckduckgo > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-04-01 CVE-2018-6849 Information Exposure vulnerability in Duckduckgo 4.2.0
In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request.
network
low complexity
duckduckgo CWE-200
4.3