CVE-2018-4133

Опубликовано: 03 апр. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Ссылки

http://www.securityfocus.com/bid/103580
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040606
Third Party Advisory
VDB Entry
https://security.gentoo.org/glsa/201808-04
Third Party Advisory
https://support.apple.com/HT208695
Vendor Advisory
https://usn.ubuntu.com/3635-1/
Third Party Advisory
http://www.securityfocus.com/bid/103580
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040606
Third Party Advisory
VDB Entry
https://security.gentoo.org/glsa/201808-04
Third Party Advisory
https://support.apple.com/HT208695
Vendor Advisory
https://usn.ubuntu.com/3635-1/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 11.1 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:a:webkitgtk:webkitgtk\+:*:*:*:*:*:*:*:*

Версия до 2.20.4 (исключая)

EPSS

Процентиль: 65%

0.00501

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2018-4133

CVSS3: 6.1

ubuntu

почти 8 лет назад

CVE-2018-4133

CVSS3: 6.1

debian

почти 8 лет назад

An issue was discovered in certain Apple products. Safari before 11.1 ...

GHSA-8r9c-gc7v-2v7w

CVSS3: 6.1

github

больше 3 лет назад

openSUSE-SU-2018:3473-1

suse-cvrf

больше 7 лет назад

Security update for webkit2gtk3

SUSE-SU-2018:3387-1

suse-cvrf

больше 7 лет назад

Security update for webkit2gtk3

EPSS

Процентиль: 65%

0.00501

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79