Lucene search

PRIOn knowledge basePRION:CVE-2024-23280

HistoryMar 08, 2024 - 2:15 a.m.

Sql injection

2024-03-0802:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

improved validation

safari

macos sonoma

ios

ipados

watchos

tvos

fingerprinting

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

11.0%

JSON

An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4, watchOS 10.4, tvOS 17.4. A maliciously crafted webpage may be able to fingerprint the user.

References

seclists.org/fulldisclosure/2024/Mar/20

seclists.org/fulldisclosure/2024/Mar/21

seclists.org/fulldisclosure/2024/Mar/24

seclists.org/fulldisclosure/2024/Mar/25

support.apple.com/en-us/HT214081

support.apple.com/en-us/HT214084

support.apple.com/en-us/HT214086

support.apple.com/en-us/HT214088

support.apple.com/en-us/HT214089