CVE-2020-20095

Опубликовано: 23 мар. 2022

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

iMessage (Messages app) iOS 12.4 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages.

Ссылки

http://packetstormsecurity.com/files/166448/RTLO-Injection-URI-Spoofing.html
Exploit
Third Party Advisory
VDB Entry
https://github.com/zadewg/RIUS
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/166448/RTLO-Injection-URI-Spoofing.html
Exploit
Third Party Advisory
VDB Entry
https://github.com/zadewg/RIUS
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apple:imessage:*:*:*:*:*:iphone_os:*:*

Версия до 12.4 (включая)

EPSS

Процентиль: 61%

0.00409

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-xgf8-49jx-rh6m