Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q38c-47vv-2gfm

Опубликовано: 30 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.

EPSS

Процентиль: 4%
0.00018
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.5
nvd
6 месяцев назад

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.

CVSS3: 5.5
fstec
6 месяцев назад

Уязвимость компонента CoreServices операционных систем macOS, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 4%
0.00018
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-20