Lucene search
HistoryJan 10, 2024 - 10:15 p.m.
CVE-2023-40383
cve-2023-40383
path handling
validation
macos ventura 13.3
user-sensitive data
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
AI Score
2.9
Confidence
High
EPSS
0
Percentile
12.7%
A path handling issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. An app may be able to access user-sensitive data.
Affected configurations
Node
applemacosRange<13.3
References
Related
vulnrichment
vulnrichment
CVE-2023-40383
2024-01-10 22:03:41
prion
prion
Path traversal
2024-01-10 22:15:00
cve
cve
CVE-2023-40383
2024-01-10 22:15:48
cvelist
cvelist
CVE-2023-40383
2024-01-10 22:03:41
apple
apple
About the security content of macOS Ventura 13.3
2023-03-27 00:00:00
openvas
openvas
Apple Mac OS X Security Update (HT213670)
2023-03-29 00:00:00
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
AI Score
2.9
Confidence
High
EPSS
0
Percentile
12.7%
Related for NVD:CVE-2023-40383