Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-1825

Опубликовано: 08 сент. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 6.1

Описание

An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross site scripting attack.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

ignored

esm-apps/bionic

ignored

esm-apps/focal

ignored

esm-apps/jammy

ignored

esm-apps/noble

ignored

esm-infra-legacy/trusty

DNE

esm-infra/xenial

ignored

focal

ignored

hirsute

ignored

end of life

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

DNE

esm-apps/bionic

ignored

esm-apps/xenial

ignored

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

hirsute

DNE

impish

DNE

jammy

DNE

Показывать по

РелизСтатусПримечание
bionic

released

2.30.3-0ubuntu0.18.04.1
devel

released

2.30.3-1
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

2.30.3-0ubuntu0.18.04.1
esm-infra/focal

not-affected

2.30.3-0ubuntu0.20.04.1
esm-infra/xenial

ignored

focal

released

2.30.3-0ubuntu0.20.04.1
hirsute

released

2.30.3-1
impish

released

2.30.3-1
jammy

released

2.30.3-1

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

DNE

esm-apps/bionic

ignored

esm-apps/xenial

ignored

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

hirsute

DNE

impish

DNE

jammy

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/focal

ignored

esm-apps/jammy

ignored

esm-infra-legacy/trusty

DNE

focal

ignored

hirsute

ignored

end of life
impish

ignored

end of life
jammy

ignored

kinetic

DNE

Показывать по

Ссылки на источники

EPSS

Процентиль: 37%
0.00156
Низкий

4.3 Medium

CVSS2

6.1 Medium

CVSS3

Связанные уязвимости

CVSS3: 8.1
redhat
почти 4 года назад

An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross site scripting attack.

CVSS3: 6.1
nvd
почти 4 года назад

An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross site scripting attack.

CVSS3: 6.1
debian
почти 4 года назад

An input validation issue was addressed with improved input validation ...

github
около 3 лет назад

An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross site scripting attack.

CVSS3: 6.1
fstec
почти 4 года назад

Уязвимость модулей отображения веб-страниц WebKitGTK и WPE WebKit, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 37%
0.00156
Низкий

4.3 Medium

CVSS2

6.1 Medium

CVSS3

Уязвимость CVE-2021-1825