A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to universal cross site scripting.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/HT212876 | Vendor Advisory |
| https://support.apple.com/en-us/HT212874 | Vendor Advisory |
| https://support.apple.com/en-us/HT212869 | Vendor Advisory |
| https://support.apple.com/en-us/HT212867 | Vendor Advisory |
| http://www.openwall.com/lists/oss-security/2021/12/20/6 | Mailing List Third Party Advisory |
| https://www.debian.org/security/2021/dsa-5031 | Third Party Advisory |
| https://www.debian.org/security/2021/dsa-5030 | Third Party Advisory |
| https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/ | Mailing List Third Party Advisory |
| https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/ | Mailing List Third Party Advisory |
Advertisement
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Information
Published : 2021-08-24 12:15
Updated : 2023-01-09 08:41
NVD link : CVE-2021-30890
Mitre link : CVE-2021-30890
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Advertisement
Products Affected
apple
- tvos
- macos
- watchos
- iphone_os
- ipados
fedoraproject
- fedora
debian
- debian_linux