GHSA-3xf9-qwxv-r3r4

GHSA-3xf9-qwxv-r3r4 PUBLISHED CVSS 6.5 MEDIUM

Record from GitHub Advisory Database · Published March 19, 2022

A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information.

Risk scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Timeline

Mar 19, 2022 CVE Published
Apr 9, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-3xf9-qwxv-r3r4
vulnetix vdb fixes GHSA-3xf9-qwxv-r3r4

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-3xf9-qwxv-r3r4/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://support.apple.com/en-us/HT213057 url
https://nvd.nist.gov/vuln/detail/CVE-2022-22594 advisory
https://support.apple.com/en-us/HT213053 url
https://support.apple.com/en-us/HT213054 url
https://support.apple.com/en-us/HT213058 url
https://support.apple.com/en-us/HT213059 url

Look up in the Resolve Platform →