CVE-2024-23280

An injection issue was addressed with improved validation

High · published March 8, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
69.7
In the wild
Unconfirmed
What it is

An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. A maliciously crafted webpage may be able to fingerprint the user.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01276 · 69.7th percentile
Published
2024-03-08T01:36Z
EPSS history
Timeline
  • 08 MAR 01:36Z
    An injection issue was addressed with improved validation
    cvelistv5