PT-2018-16537 · Apple+2 · Itunes For Windows+7

Shhnjk

·

Publicado

2018-11-22

·

Atualizado

2024-06-15

·

CVE-2018-4345

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Safari versions prior to 12 iOS versions prior to 12 tvOS versions prior to 12 iTunes for Windows versions prior to 12.9 iCloud for Windows versions prior to 7.7
Description A cross-site scripting issue existed in Safari, which was addressed with improved URL validation.
Recommendations For Safari versions prior to 12, update to version 12 or later to resolve the issue. For iOS versions prior to 12, update to version 12 or later to resolve the issue. For tvOS versions prior to 12, update to version 12 or later to resolve the issue. For iTunes for Windows versions prior to 12.9, update to version 12.9 or later to resolve the issue. For iCloud for Windows versions prior to 7.7, update to version 7.7 or later to resolve the issue.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-4345
OPENSUSE-SU-2019:0081-1
OPENSUSE-SU-2019_0068-1
OPENSUSE-SU-2019_0081-1
OPENSUSE-SU-2024:11506-1
SUSE-SU-2019:0059-1
SUSE-SU-2019:0092-1
USN-3828-1

Produtos afetados

Safari
Suse
Ubuntu
Icloud For Windows
Ios
Itunes
Itunes For Windows
Tvos