Description
A logic issue was addressed with improved state management. This issue is fixed in iOS 13, Safari 13. Processing maliciously crafted web content may lead to universal cross site scripting.
References (3)
Core 3
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/HT210606
Vendor Advisory x_refsource_misc
https://support.apple.com/HT210608
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/202003-22
Scores
CVSS v3
6.1
EPSS
0.0101
EPSS Percentile
59.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (3)
apple/iphone_os
< 13.0
apple/safari
< 13
webkitgtk/webkitgtk
< 2.26.4
Published
Dec 18, 2019
Tracked Since
Feb 18, 2026