CVE-2024-23280
MEDIUM | Platform: iOS | Changelog
CVE Details
Description
An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. A maliciously crafted webpage may be able to fingerprint the user.
CVSS 3.1 Score
| Metric | Value |
|---|---|
| Base Score | 6.5 (MEDIUM) |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Weakness
References
- Apple Security Advisory
- NVD Entry
- https://support.apple.com/en-us/120881
- https://support.apple.com/en-us/120882
- https://support.apple.com/en-us/120894
- https://support.apple.com/en-us/120895
- http://seclists.org/fulldisclosure/2024/Mar/20 (Mailing List)
- http://seclists.org/fulldisclosure/2024/Mar/21 (Mailing List)
- http://seclists.org/fulldisclosure/2024/Mar/24 (Mailing List)