CVE-2023-32370

2023-09-0602:15:09

[email protected]

web.nvd.nist.gov

cve-2023-32370

logic issue

macos ventura 13.3

content security policy

wildcards

domains

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

Confidence

Low

EPSS

0.001

Percentile

30.9%

JSON

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Policy to block domains with wildcards may fail.

Affected configurations

Nvd

Node

applemacosRange13.0–13.3

Node

webkitgtkwebkitgtkRange<2.40.1

wpewebkitwpe_webkitRange<2.40.1

VendorProductVersionCPE
applemacos*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
webkitgtkwebkitgtk*cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*
wpewebkitwpe_webkit*cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	macos	*	cpe:2.3:o:apple:macos::::::::
webkitgtk	webkitgtk	*	cpe:2.3:a:webkitgtk:webkitgtk::::::::
wpewebkit	wpe_webkit	*	cpe:2.3:a:wpewebkit:wpe_webkit::::::::