CVE-2019-6228

MEDIUM

Safari < 12.0.3 - Cross-Site Scripting via URL Validation Bypass

Title source: llm

Description

A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue is fixed in iOS 12.1.3, Safari 12.0.3. Processing maliciously crafted web content may lead to a cross site scripting attack.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

https://support.apple.com/HT209443

Vendor Advisory x_refsource_confirm

https://support.apple.com/HT209449

Third Party Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/106692

Scores

CVSS v3 6.1

EPSS 0.0085

EPSS Percentile 54.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (2)

apple/iphone_os < 12.1.3

apple/safari < 12.0.3

Published Mar 05, 2019

Tracked Since Feb 18, 2026