CVE-2021-30890

Sažetak

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to universal cross site scripting.

Reference

https://support.apple.com/en-us/HT212869
https://support.apple.com/en-us/HT212867
https://support.apple.com/en-us/HT212874
https://support.apple.com/en-us/HT212876
http://www.openwall.com/lists/oss-security/2021/12/20/6
https://www.debian.org/security/2021/dsa-5030
https://www.debian.org/security/2021/dsa-5031
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/

CVSS

Base:	4.3
Impact:	2.9
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
NONE	PARTIAL	NONE

CVSS vektor

AV:N/AC:M/Au:N/C:N/I:P/A:N

Zadnje važnije ažuriranje

07-11-2023 - 03:33

Objavljeno

24-08-2021 - 19:15