mistune-patch-backport

CVE-2021-1748 iOS = 14.3 패치 CVE-2021-1748의 근본 원인은 앱이 임의의 data URI를 신뢰하여 로컬 WebView에서 로드하는 것입니다. 이 트윅은 data: URI를 가로채서 iOS = 14.3용 패치를 백포트합니다. 버그의 강력한 변종이 여전히 존재합니다. 이 패치는 신뢰할 수 있는 도메인에서의 서버 측 스크립트 삽입이나 오픈 리디렉션을 막지 못합니다...

CVE-2021-1748

A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...

CVE-2021-1748

creationtimestamp| type| source ---|---|--- 2021-08-31 18:09:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/435 2021-09-03 22:52:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/508 2021-09-03 22:57:29+00:00| published-proof-of-concept|...

CVE-2021-1748

A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...

CVE-2021-1748

A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...

CVE-2021-1748

CVE-2021-1748: A validation issue in processing a URL was fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. The vulnerability could allow arbitrary javascript execution when handling a malicious URL. Connected Apple advisories (HT212149/HT212148/HT212146) confirm the affected platforms a...

CVE-2021-1748

A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...