CVE-2021-1748

Description

A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.

References

https://github.com/ChiChou/mistune-patch-backport

https://github.com/Ivanhoe76zzzz/itmsBlock

https://support.apple.com/en-us/HT212149

https://support.apple.com/en-us/HT212148

https://support.apple.com/en-us/HT212146

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS