CVE-2021-30890

Description

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to universal cross site scripting.

References

https://support.apple.com/en-us/HT212876

https://support.apple.com/en-us/HT212874

https://support.apple.com/en-us/HT212869

https://support.apple.com/en-us/HT212867

http://www.openwall.com/lists/oss-security/2021/12/20/6

https://www.debian.org/security/2021/dsa-5031

https://www.debian.org/security/2021/dsa-5030

https://lists.fedoraproject.org/archives/list/[email protected]/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/

https://lists.fedoraproject.org/archives/list/[email protected]/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/

Details

Risk Information

CVSS v2

CVSS v3