CVE-2019-8762 Information

Description

A validation issue was addressed with improved logic. This issue is fixed in Safari 13.0.1 iOS 13.1 and iPadOS 13.1 iCloud for Windows 10.7 tvOS 13 iCloud for Windows 7.14 iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Reference

https://support.apple.com/en-us/HT210603 https://support.apple.com/en-us/HT210604 https://support.apple.com/en-us/HT210605 https://support.apple.com/en-us/HT210635 https://support.apple.com/en-us/HT210636 https://support.apple.com/en-us/HT210637

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

CHANGED

Integrity Impact

LOW

Availability Impact

LOW

Base Score

NONE

Base Severity

6.1