CVE-2025-24208

Опубликовано: 31 мар. 2025

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack.

Ссылки

https://support.apple.com/en-us/122371
Vendor Advisory
https://support.apple.com/en-us/122379
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 18.4 (исключая)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 18.4 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 18.4 (исключая)

EPSS

Процентиль: 19%

0.00061

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVE-2025-24208

CVSS3: 6.1

ubuntu

4 месяца назад

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack.

CVE-2025-24208

CVSS3: 6.1

redhat

4 месяца назад

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack.

CVE-2025-24208

CVSS3: 6.1

debian

4 месяца назад

A permissions issue was addressed with additional restrictions. This i ...

GHSA-vwcg-r7w2-v8qc

CVSS3: 6.1

github

4 месяца назад

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack.

BDU:2025-05568

CVSS3: 6.1

fstec

4 месяца назад

Уязвимость браузера Safari операционных систем iPadOS, iOS, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)

EPSS

Процентиль: 19%

0.00061

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79