VDB
BDU%3A2020-01504
BDU%3A2020-01504
PUBLISHED
CVSS 5.800000190734863 MEDIUM
Уязвимость модуля отображения WebKit операционных систем openSUSE Leap, Mac OS X, iOS, tvOS, браузера Safari, мультимедийного проигрывателя iTunes и сервиса iCloud, существующая из-за непринятия мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку типа «межсайтовый скриптинг»
Risk Scores
CVSS 2.0
5.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Novell Inc., Apple Inc. | Debian GNU/Linux, Suse Linux Enterprise Desktop, SUSE Enterprise Storage, SUSE Linux Enterprise Server for SAP Applications, SUSE Linux Enterprise Software Development Kit, SUSE Linux Enterprise Workstation Extension, SUSE OpenStack Cloud, Suse Linux Enterprise Server, SUSE Linux Enterprise Module for Basesystem, OpenSUSE Leap, SUSE Linux Enterprise Module for Desktop Applications, SUSE Linux Enterprise Point of Sale, HPE Helion Openstack, iOS, MacOS, tvOS, Safari, iTunes, iCloud, WPE WebKit, WebKitGTK |
Timeline
- Apr 14, 2020 CVE Published
- Jun 1, 2020 CVE Updated
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
References
- https://support.apple.com/HT210346 url
- https://support.apple.com/HT210348 url
- https://support.apple.com/HT210351 url
- https://support.apple.com/HT210355 url
- https://support.apple.com/HT210356 url
- https://support.apple.com/HT210357 url
- https://support.apple.com/HT210358 url
- https://www.debian.org/security/2019/dsa-4515 url
- https://www.suse.com/security/cve/CVE-2019-8649/ url
- https://webkitgtk.org/security/WSA-2019-0004.html advisory