Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-4133

Опубликовано: 03 апр. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 6.1

Описание

An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

РелизСтатусПримечание
bionic

DNE

devel

DNE

disco

DNE

eoan

ignored

end of life
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

impish

DNE

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was needs-triage
cosmic

ignored

end of life
devel

ignored

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

ignored

esm-apps/focal

ignored

esm-apps/jammy

ignored

esm-apps/noble

ignored

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was needs-triage
cosmic

ignored

end of life
devel

DNE

disco

ignored

end of life
eoan

DNE

esm-apps/bionic

ignored

esm-apps/xenial

ignored

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needs-triage]
esm-infra/focal

DNE

Показывать по

РелизСтатусПримечание
artful

released

2.20.1-0ubuntu0.17.10.1
bionic

not-affected

2.20.0-2
cosmic

not-affected

2.20.0-2
devel

not-affected

2.20.0-2
disco

not-affected

2.20.0-2
eoan

not-affected

2.20.0-2
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

2.20.0-2
esm-infra/focal

not-affected

2.20.0-2
esm-infra/xenial

released

2.20.1-0ubuntu0.16.04.1

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was needs-triage
cosmic

ignored

end of life
devel

DNE

disco

DNE

eoan

DNE

esm-apps/bionic

ignored

esm-apps/xenial

ignored

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needs-triage]
esm-infra/focal

DNE

Показывать по

EPSS

Процентиль: 65%
0.00501
Низкий

4.3 Medium

CVSS2

6.1 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.1
nvd
почти 8 лет назад

An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

CVSS3: 6.1
debian
почти 8 лет назад

An issue was discovered in certain Apple products. Safari before 11.1 ...

CVSS3: 6.1
github
больше 3 лет назад

An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

suse-cvrf
больше 7 лет назад

Security update for webkit2gtk3

suse-cvrf
больше 7 лет назад

Security update for webkit2gtk3

EPSS

Процентиль: 65%
0.00501
Низкий

4.3 Medium

CVSS2

6.1 Medium

CVSS3