Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gg8p-2j6g-g8mc

Опубликовано: 15 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may bypass Same Origin Policy.

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may bypass Same Origin Policy.

EPSS

Процентиль: 0%
0.00008
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-345

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 2 лет назад

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may bypass Same Origin Policy.

CVSS3: 5.5
redhat
больше 2 лет назад

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may bypass Same Origin Policy.

CVSS3: 5.5
nvd
больше 2 лет назад

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may bypass Same Origin Policy.

CVSS3: 5.5
debian
больше 2 лет назад

A logic issue was addressed with improved state management. This issue ...

CVSS3: 5.5
fstec
больше 2 лет назад

Уязвимость модулей отображения веб-страниц WebKitGTK и WPE WebKit, связанная с ошибками управления состоянием, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 0%
0.00008
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-345