Lucene search

K
cvelistAppleCVELIST:CVE-2024-23280
HistoryMar 08, 2024 - 1:36 a.m.

CVE-2024-23280

2024-03-0801:36:14
apple
raw.githubusercontent.com
1
injection
safari
macos sonoma
validation
fingerprinting
webpage

5.7 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.7%

An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4, watchOS 10.4, tvOS 17.4. A maliciously crafted webpage may be able to fingerprint the user.

5.7 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.7%