CVE-2023-27954

Sažetak

The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information.

Reference

https://support.apple.com/en-us/HT213670
https://support.apple.com/en-us/HT213671
https://support.apple.com/en-us/HT213673
https://support.apple.com/en-us/HT213674
https://support.apple.com/en-us/HT213676
https://support.apple.com/en-us/HT213678
https://support.apple.com/en-us/HT213670
https://support.apple.com/en-us/HT213671
https://support.apple.com/en-us/HT213673
https://support.apple.com/en-us/HT213674
https://support.apple.com/en-us/HT213676
https://support.apple.com/en-us/HT213678

CVSS

Base:	6.5
Impact:	3.6
Exploitability:	2.8

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
HIGH	NONE	NONE

CVSS vektor

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Zadnje važnije ažuriranje

29-01-2025 - 15:15

Objavljeno

08-05-2023 - 20:15