Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-9805

Опубликовано: 10 июл. 2020
Источник: redhat
CVSS3: 7.1

Описание

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to universal cross site scripting.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6webkitgtkOut of support scope
Red Hat Enterprise Linux 7webkitgtk3Will not fix
Red Hat Enterprise Linux 7webkitgtk4Will not fix
Red Hat Enterprise Linux 8webkit2gtk3FixedRHSA-2020:445104.11.2020

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-841->CWE-79
https://bugzilla.redhat.com/show_bug.cgi?id=1879559webkitgtk: Logic issue may lead to cross site scripting

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.1
ubuntu
около 5 лет назад

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS3: 7.1
nvd
около 5 лет назад

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS3: 7.1
debian
около 5 лет назад

A logic issue was addressed with improved restrictions. This issue is ...

CVSS3: 7.1
github
около 3 лет назад

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS3: 7.1
fstec
около 5 лет назад

Уязвимость модуля отображения веб-страниц WebKit операционных систем Mac OS, позволяющая нарушителю проводить межсайтовые сценарные атаки

7.1 High

CVSS3