CVE-2018-4110

CRITICAL

Apple <11.3 - CSRF

Title source: llm

Description

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Web App" component. It allows remote attackers to bypass intended restrictions on cookie persistence.

Exploits (1)

nomisec WRITEUP 4 stars
by bencompton · poc
https://github.com/bencompton/ios11-cookie-set-expire-issue

References (3)

Scores

CVSS v3 9.8
EPSS 0.0312
EPSS Percentile 86.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (1)
apple/iphone_os < 11.3
Published Apr 03, 2018
Tracked Since Feb 18, 2026