Lucene search

[email protected]CVE-2019-8813

HistoryDec 18, 2019 - 6:15 p.m.

CVE-2019-8813

2019-12-1818:15:00

CWE-79

[email protected]

web.nvd.nist.gov

204

cve-2019-8813

security update

ios 13.2

ipados 13.2

tvos 13.2

safari 13.0.3

itunes for windows 12.10.2

icloud for windows 11.0

cross site scripting

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

64.9%

JSON

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to universal cross site scripting.

CPENameOperatorVersion
apple:iphone_osapple iphone oslt13.2
apple:ipadosapple ipadoslt13.2
apple:tvosapple tvoslt13.2
apple:safariapple safarilt13.0.3
apple:itunesapple ituneslt12.10.2
apple:icloudapple icloudlt10.8
webkitgtk:webkitgtk\+webkitgtk webkitgtk\+lt2.26.4

CPE	Name	Operator	Version
apple:iphone_os	apple iphone os	lt	13.2
apple:ipados	apple ipados	lt	13.2
apple:tvos	apple tvos	lt	13.2
apple:safari	apple safari	lt	13.0.3
apple:itunes	apple itunes	lt	12.10.2
apple:icloud	apple icloud	lt	10.8
webkitgtk:webkitgtk\+	webkitgtk webkitgtk\+	lt	2.26.4