VDB
GHSA-378r-2hmj-3r7x
GHSA-378r-2hmj-3r7x
PUBLISHED
CVSS 5 MEDIUM
Record from GitHub Advisory Database · Published April 1, 2025
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system.
Risk scores
CVSS 3.1
5
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
Timeline
- Apr 1, 2025 CVE Published
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-378r-2hmj-3r7x
vulnetix vdb fixes GHSA-378r-2hmj-3r7xOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-378r-2hmj-3r7x/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://support.apple.com/en-us/122371 url
- https://support.apple.com/en-us/122372 url
- https://support.apple.com/en-us/122374 url
- https://support.apple.com/en-us/122375 url
- https://support.apple.com/en-us/122376 url
- https://support.apple.com/en-us/122377 url
- http://seclists.org/fulldisclosure/2025/Apr/10 url
- https://nvd.nist.gov/vuln/detail/CVE-2025-24203 advisory
- https://support.apple.com/en-us/122373 url
- https://support.apple.com/en-us/122378 url
- http://seclists.org/fulldisclosure/2025/Apr/5 url
- http://seclists.org/fulldisclosure/2025/Apr/8 url
- http://seclists.org/fulldisclosure/2025/Apr/9 url