Cross-site scripting (XSS) vulnerability in Notes in Apple OS X before 10.11 allows local users to inject arbitrary web script or HTML via crafted text.
References
Link | Resource |
---|---|
https://support.apple.com/HT205267 | Vendor Advisory |
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html | Vendor Advisory |
http://www.securityfocus.com/bid/76908 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1033703 | Third Party Advisory VDB Entry |
Configurations
Information
Published : 2015-10-08 22:59
Updated : 2016-12-09 07:49
NVD link : CVE-2015-5875
Mitre link : CVE-2015-5875
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
apple
- mac_os_x