Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2020-9952

UNKNOWN
Published 2020-10-16T16:53:49
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2020-9952. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scripting attack.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Apple

iOS

Affected Versions:

unspecified
Apple

tvOS

Affected Versions:

unspecified
Apple

watchOS

Affected Versions:

unspecified
Apple

Safari

Affected Versions:

unspecified
Apple

iCloud for Windows

Affected Versions:

unspecified
Apple

iCloud for Windows (Legacy)

Affected Versions:

unspecified

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed MODERATE

GHSA-2hf4-pxq2-63h5

Advisory Details

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scripting attack.

CVSS Scoring

CVSS Score

5.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-9952
WEB https://security.gentoo.org/glsa/202012-10
WEB https://support.apple.com/HT211843
WEB https://support.apple.com/HT211844
WEB https://support.apple.com/HT211845
WEB https://support.apple.com/HT211846
WEB https://support.apple.com/HT211847
WEB https://support.apple.com/HT211850
WEB http://seclists.org/fulldisclosure/2020/Nov/18
WEB http://seclists.org/fulldisclosure/2020/Nov/19
WEB http://seclists.org/fulldisclosure/2020/Nov/20
WEB http://seclists.org/fulldisclosure/2020/Nov/22
WEB http://www.openwall.com/lists/oss-security/2020/11/23/3

Advisory provided by GitHub Security Advisory Database. Published: May 24, 2022, Modified: July 24, 2022

References

https://support.apple.com/HT211850
https://support.apple.com/HT211844
https://support.apple.com/HT211845
https://support.apple.com/HT211843
https://support.apple.com/HT211846
https://support.apple.com/HT211847
http://seclists.org/fulldisclosure/2020/Nov/18
http://seclists.org/fulldisclosure/2020/Nov/19
http://seclists.org/fulldisclosure/2020/Nov/20
http://seclists.org/fulldisclosure/2020/Nov/22
http://www.openwall.com/lists/oss-security/2020/11/23/3
https://security.gentoo.org/glsa/202012-10
Published: 2020-10-16T16:53:49
Last Modified: 2024-08-04T10:50:56.773Z
Copied to clipboard!