Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2019-8690

Опубликовано: 29 авг. 2019
Источник: redhat
CVSS3: 6.1

Описание

A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6webkitgtkWill not fix
Red Hat Enterprise Linux 7webkitgtk3Will not fix
Red Hat Enterprise Linux 7webkitgtk4FixedRHSA-2020:403529.09.2020
Red Hat Enterprise Linux 8accountsserviceFixedRHSA-2019:355305.11.2019
Red Hat Enterprise Linux 8appstream-dataFixedRHSA-2019:355305.11.2019
Red Hat Enterprise Linux 8baobabFixedRHSA-2019:355305.11.2019
Red Hat Enterprise Linux 8chrome-gnome-shellFixedRHSA-2019:355305.11.2019
Red Hat Enterprise Linux 8evinceFixedRHSA-2019:355305.11.2019
Red Hat Enterprise Linux 8file-rollerFixedRHSA-2019:355305.11.2019
Red Hat Enterprise Linux 8gdk-pixbuf2FixedRHSA-2019:355305.11.2019

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1876664webkitgtk: Incorrect state management leading to universal cross-site scripting

6.1 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.1
ubuntu
больше 5 лет назад

A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS3: 6.1
nvd
больше 5 лет назад

A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS3: 6.1
debian
больше 5 лет назад

A logic issue existed in the handling of document loads. This issue wa ...

github
около 3 лет назад

A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS3: 6.1
fstec
почти 6 лет назад

Уязвимость модуля отображения WebKit, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю осуществить межсайтовую сценарную атаку

6.1 Medium

CVSS3