VDB

CVE-2021-30897

CVE-2021-30897 PUBLISHED CVSS 6.5 MEDIUM

An issue existed in the specification for the resource timing API. The specification was updated and the updated specification was implemented. This issue is fixed in macOS Monterey 12.0.1. A malicious website may exfiltrate data cross-origin.

EPSS 1.71% · 77.3th percentile

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
1.71%
77.3th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSqtwebkit-source0, 2.3.2-0ubuntu13
Ubuntu:16.04:LTSqtwebkit-source2.3.2-0ubuntu10, 2.3.2-0ubuntu11, 0
Ubuntu:20.04:LTSqtwebkit-opensource-src5.212.0~alpha3-7, 5.212.0~alpha3-6, 5.212.0~alpha3-5
Ubuntu:22.04:LTSwebkit2gtk0
Ubuntu:16.04:LTSwebkit2gtk2.18.0-0ubuntu0.16.04.2, 2.20.3-0ubuntu0.16.04.1, 2.14.3-0ubuntu0.16.04.1
Ubuntu:18.04:LTSqtwebkit-opensource-src5.9.1+dfsg-5ubuntu3, 0, 5.212.0~alpha2-7build2
Ubuntu:24.04:LTSqtwebkit-opensource-src5.212.0~alpha4-34ubuntu3, 5.212.0~alpha4-34ubuntu4, 0
Ubuntu:16.04:LTSwebkitgtk2.4.10-0ubuntu1, 0, 2.4.11-0ubuntu0.1
Ubuntu:18.04:LTSwebkitgtk2.4.11-3ubuntu3, 2.4.11-3ubuntu2, 0
Ubuntu:20.04:LTSwpewebkit0, 2.26.3-1, 2.26.4-1
Ubuntu:22.04:LTSwpewebkit2.34.1-1, 0, 2.32.4-1
Ubuntu:22.04:LTSqtwebkit-opensource-src5.212.0~alpha4-14build1, 5.212.0~alpha4-13, 5.212.0~alpha4-12
Ubuntu:16.04:LTSqtwebkit-opensource-src0, 5.5.1+dfsg-2ubuntu1, 5.4.2+dfsg-1ubuntu2.1
Ubuntu:18.04:LTSwebkit2gtk2.22.5-0ubuntu0.18.04.1, 2.22.4-0ubuntu0.18.04.1, 2.22.2-0ubuntu0.18.04.2
Ubuntu:20.04:LTSwebkit2gtk2.32.4-0ubuntu0.20.04.1, 2.30.5-0ubuntu0.20.04.1, 2.28.1-1

Timeline

  • Aug 24, 2021 CVE Published
  • Dec 24, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 17, 2022 EPSS Score
  • Apr 12, 2022 EPSS Score
  • Jun 6, 2022 EPSS Score
  • Aug 1, 2022 EPSS Score
  • Sep 24, 2022 EPSS Score
  • Nov 18, 2022 EPSS Score
  • Jan 12, 2023 EPSS Score
  • May 1, 2023 EPSS Score
  • Jun 25, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›