TROYANOSYVIRUS
Volver a CVEs

CVE-2021-30890

MEDIUM
6.1

Descripcion

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to universal cross site scripting.

Detalles CVE

Puntuacion CVSS v3.16.1
SeveridadMEDIUM
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioREQUIRED
Publicado8/24/2021
Ultima modificacion11/21/2024
Fuentenvd
Avistamientos honeypot0

Productos afectados

apple:ipadosapple:iphone_osapple:macosapple:tvosapple:watchosdebian:debian_linuxfedoraproject:fedora

Debilidades (CWE)

CWE-79

Referencias

https://support.apple.com/en-us/HT212867(product-security@apple.com)
https://support.apple.com/en-us/HT212869(product-security@apple.com)
https://support.apple.com/en-us/HT212874(product-security@apple.com)
https://support.apple.com/en-us/HT212876(product-security@apple.com)
http://www.openwall.com/lists/oss-security/2021/12/20/6(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212867(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212869(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212874(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212876(af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2021/dsa-5030(af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2021/dsa-5031(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.