Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-9925

Опубликовано: 29 июл. 2020
Источник: redhat
CVSS3: 7.1
EPSS Низкий

Описание

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may lead to universal cross site scripting.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6webkitgtkOut of support scope
Red Hat Enterprise Linux 7webkitgtk3Will not fix
Red Hat Enterprise Linux 7webkitgtk4Will not fix
Red Hat Enterprise Linux 8webkit2gtk3FixedRHSA-2020:445104.11.2020

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-841->CWE-79
https://bugzilla.redhat.com/show_bug.cgi?id=1879541webkitgtk: A logic issue may lead to cross site scripting

EPSS

Процентиль: 58%
0.00366
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 6.1
ubuntu
больше 4 лет назад

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS3: 6.1
nvd
больше 4 лет назад

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS3: 6.1
debian
больше 4 лет назад

A logic issue was addressed with improved state management. This issue ...

CVSS3: 6.1
github
около 3 лет назад

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may lead to universal cross site scripting.

suse-cvrf
почти 5 лет назад

Security update for webkit2gtk3

EPSS

Процентиль: 58%
0.00366
Низкий

7.1 High

CVSS3