CVE-2024-23245

This issue was addressed by adding an additional prompt for user consent

Medium · published March 8, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
36.3
In the wild
Unconfirmed
What it is

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. Third-party shortcuts may use a legacy action from Automator to send events to apps without user consent.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00431 · 36.3th percentile
Published
2024-03-08T01:36Z
EPSS history
Timeline
  • 08 MAR 01:36Z
    This issue was addressed by adding an additional prompt for user consent
    cvelistv5