Описание
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the Bracketed Paste Mode of the "Terminal" component. It allows user-assisted attackers to inject arbitrary commands within pasted content.
Ссылки
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 10.13.4 (исключая)
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
EPSS
Процентиль: 79%
0.01234
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-74
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the Bracketed Paste Mode of the "Terminal" component. It allows user-assisted attackers to inject arbitrary commands within pasted content.
EPSS
Процентиль: 79%
0.01234
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-74