This issue was addressed with improved checks. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. Processing a document may lead to a cross site scripting attack.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/HT213841 | Vendor Advisory |
| https://support.apple.com/en-us/HT213842 | Vendor Advisory |
| https://support.apple.com/en-us/HT213843 | Vendor Advisory |
| https://support.apple.com/en-us/HT213846 | Vendor Advisory |
| https://support.apple.com/en-us/HT213847 | Vendor Advisory |
| https://support.apple.com/en-us/HT213848 | Vendor Advisory |
| https://support.apple.com/en-us/HT213841 | Vendor Advisory |
| https://support.apple.com/en-us/HT213842 | Vendor Advisory |
| https://support.apple.com/en-us/HT213843 | Vendor Advisory |
| https://support.apple.com/en-us/HT213846 | Vendor Advisory |
| https://support.apple.com/en-us/HT213847 | Vendor Advisory |
| https://support.apple.com/en-us/HT213848 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.apple.com/en-us/HT213841 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT213842 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT213843 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT213846 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT213847 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT213848 - Vendor Advisory |
Information
Published : 2023-07-28 05:15
Updated : 2024-11-21 08:03
NVD link : CVE-2023-32445
Mitre link : CVE-2023-32445
CVE.ORG link : CVE-2023-32445
JSON object : View
Products Affected
apple
- ipados
- tvos
- macos
- safari
- iphone_os
- watchos
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')