Описание
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. Third-party shortcuts may use a legacy action from Automator to send events to apps without user consent.
Ссылки
- Mailing List
- Mailing List
- Mailing List
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Mailing List
- Mailing List
- Mailing List
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 12.0 (включая) до 12.7.4 (исключая)Версия от 13.0 (включая) до 13.6.5 (исключая)Версия от 14.0 (включая) до 14.4 (исключая)
Одно из
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
EPSS
Процентиль: 19%
0.00061
Низкий
3.3 Low
CVSS3
5.4 Medium
CVSS3
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 5.4
github
почти 2 года назад
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. Third-party shortcuts may use a legacy action from Automator to send events to apps without user consent.
EPSS
Процентиль: 19%
0.00061
Низкий
3.3 Low
CVSS3
5.4 Medium
CVSS3
Дефекты
NVD-CWE-noinfo