CVE-2021-30890

Published: Aug 24, 2021Modified: Nov 21, 2024

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to universal cross site scripting.

Affected (9)

Products: Apple: Ipados, Iphone Os, Macos, Tvos, Watchos · Fedoraproject: Fedora · Debian: Debian Linux

5 products

1 product

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 15.1
Apple Iphone Os	Before 15.1
Apple Macos	Before 12.0.1
Apple Tvos	Before 15.1
Apple Watchos	Before 8.1

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 34
Fedoraproject Fedora	Version 35

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (18)

http://www.openwall.com/lists/oss-security/2021/12/20/6

Source: product-security@apple.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/

Source: product-security@apple.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/

Source: product-security@apple.com

https://support.apple.com/en-us/HT212867

Source: product-security@apple.com

https://support.apple.com/en-us/HT212869

Source: product-security@apple.com

https://support.apple.com/en-us/HT212874

Source: product-security@apple.com

https://support.apple.com/en-us/HT212876

Source: product-security@apple.com

https://www.debian.org/security/2021/dsa-5030

Source: product-security@apple.com

https://www.debian.org/security/2021/dsa-5031

Source: product-security@apple.com

http://www.openwall.com/lists/oss-security/2021/12/20/6

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212867

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212869

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212874

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212876

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.debian.org/security/2021/dsa-5030

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.debian.org/security/2021/dsa-5031

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.