CVE-2018-4309

🗓️ 03 Apr 2019 18:29:06Reported by [email protected]Type

A cross-site scripting issue in Safari was fixed by improved URL validation in versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.

Reporter	Title	Published	Views	Family All 51
Tenable Nessus	Apple Safari < 12 Multiple Vulnerabilities	8 Apr 201900:00	–	nessus
Tenable Nessus	Apple iOS < 12.0 Multiple Vulnerabilities (EFAIL, APPLE-SA-2018-9-24-4 and APPLE-SA-2018-10-30-8)	17 Apr 201900:00	–	nessus
Tenable Nessus	Apple iOS < 12.0 Multiple Vulnerabilities (EFAIL)	21 Sep 201800:00	–	nessus
Tenable Nessus	GLSA-201812-04 : WebkitGTK+: Multiple vulnerabilities	3 Dec 201800:00	–	nessus
Tenable Nessus	Apple iTunes < 12.9 Multiple Vulnerabilities (credentialed check)	2 Oct 201800:00	–	nessus
Tenable Nessus	Apple iTunes < 12.9 Multiple Vulnerabilities (uncredentialed check)	2 Oct 201800:00	–	nessus
Tenable Nessus	macOS : Apple Safari < 12 Multiple Vulnerabilities	20 Sep 201800:00	–	nessus
Tenable Nessus	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-68)	22 Jan 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-81)	24 Jan 201900:00	–	nessus
Tenable Nessus	SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:0059-1)	11 Jan 201900:00	–	nessus

NVD

Node

apple safariRange<12

apple iphone_osRange<12.0

apple tvosRange<12

Node

apple icloudRange<7.7

apple itunesRange<12.9

AND

microsoft windowsMatch-

Source	Link
support	www.support.apple.com/kb/HT209140
support	www.support.apple.com/kb/HT209107
support	www.support.apple.com/kb/HT209141
support	www.support.apple.com/kb/HT209109
support	www.support.apple.com/kb/HT209106

21 Nov 2024 04:07Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24.3

CVSS 36.1

EPSS0.00548

CWE-79