Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xmf6-p99q-898v

Опубликовано: 17 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, tvOS 18. A malicious website may exfiltrate data cross-origin.

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, tvOS 18. A malicious website may exfiltrate data cross-origin.

EPSS

Процентиль: 31%
0.00115
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 6.5
ubuntu
11 месяцев назад

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, tvOS 18. A malicious website may exfiltrate data cross-origin.

CVSS3: 6.5
redhat
10 месяцев назад

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, tvOS 18. A malicious website may exfiltrate data cross-origin.

CVSS3: 6.5
nvd
11 месяцев назад

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, tvOS 18. A malicious website may exfiltrate data cross-origin.

CVSS3: 6.5
debian
11 месяцев назад

A cross-origin issue existed with "iframe" elements. This was addresse ...

CVSS3: 6.5
fstec
11 месяцев назад

Уязвимость модулей отображения веб-страниц WebKitGTK и WPE WebKit, связанная с недостатком в механизме подтверждения источника, позволяющая нарушителю получить доступ к конфиденциальным данным

EPSS

Процентиль: 31%
0.00115
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-346