Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3xf9-qwxv-r3r4

Опубликовано: 19 мар. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information.

A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information.

EPSS

Процентиль: 30%
0.00109
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 3 лет назад

A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information.

CVSS3: 7.5
redhat
больше 3 лет назад

A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information.

CVSS3: 6.5
nvd
больше 3 лет назад

A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information.

CVSS3: 6.5
debian
больше 3 лет назад

A cross-origin issue in the IndexDB API was addressed with improved in ...

CVSS3: 7.5
fstec
больше 3 лет назад

Уязвимость компонента API IndexDB модулей отображения веб-страниц WebKitGTK и WPE WebKit, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 30%
0.00109
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-346