Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2019-8649

Опубликовано: 18 дек. 2019
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 6.1

Описание

A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.

РелизСтатусПримечание
bionic

DNE

devel

DNE

disco

DNE

eoan

ignored

end of life
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

impish

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

ignored

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

ignored

esm-apps/focal

ignored

esm-apps/jammy

ignored

esm-apps/noble

ignored

esm-infra-legacy/trusty

DNE

esm-infra/xenial

ignored

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

DNE

disco

ignored

end of life
eoan

DNE

esm-apps/bionic

ignored

esm-apps/xenial

ignored

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

Показывать по

РелизСтатусПримечание
bionic

released

2.24.4-0ubuntu0.18.04.1
devel

not-affected

2.25.4-1ubuntu1
disco

released

2.24.4-0ubuntu0.19.04.1
eoan

not-affected

2.25.4-1ubuntu1
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

2.24.4-0ubuntu0.18.04.1
esm-infra/focal

not-affected

2.25.4-1ubuntu1
esm-infra/xenial

ignored

focal

not-affected

2.25.4-1ubuntu1
groovy

not-affected

2.25.4-1ubuntu1

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

DNE

disco

DNE

eoan

DNE

esm-apps/bionic

ignored

esm-apps/xenial

ignored

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

Показывать по

EPSS

Процентиль: 93%
0.09769
Низкий

4.3 Medium

CVSS2

6.1 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.1
redhat
почти 6 лет назад

A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS3: 6.1
nvd
больше 5 лет назад

A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS3: 6.1
debian
больше 5 лет назад

A logic issue existed in the handling of synchronous page loads. This ...

github
около 3 лет назад

A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS3: 6.1
fstec
больше 5 лет назад

Уязвимость модуля отображения WebKit операционных систем openSUSE Leap, Mac OS X, iOS, tvOS, браузера Safari, мультимедийного проигрывателя iTunes и сервиса iCloud, существующая из-за непринятия мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку типа «межсайтовый скриптинг»

EPSS

Процентиль: 93%
0.09769
Низкий

4.3 Medium

CVSS2

6.1 Medium

CVSS3

Уязвимость CVE-2019-8649