VDB
GHSA-73m5-j333-fcwc
GHSA-73m5-j333-fcwc
PUBLISHED
CVSS 6.5 MEDIUM
Record from GitHub Advisory Database · Published January 23, 2024
An access issue was addressed with improved access restrictions. This issue is fixed in watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, iOS 16.7.5 and iPadOS 16.7.5, Safari 17.3. A maliciously crafted webpage may be able to fingerprint the user.
Risk scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Timeline
- Jan 23, 2024 CVE Published
- Apr 27, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-73m5-j333-fcwc
vulnetix vdb fixes GHSA-73m5-j333-fcwc
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-73m5-j333-fcwc/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://support.apple.com/kb/HT214063 url
- https://support.apple.com/kb/HT214056 url
- https://support.apple.com/en-us/HT214063 url
- https://support.apple.com/en-us/HT214055 url
- https://support.apple.com/en-us/120339 url
- https://support.apple.com/en-us/120311 url
- https://support.apple.com/en-us/120309 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X2VJMEDT4GL42AQVHSYOT6DIVJDZWIV4 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/US43EQFC2IS66EA2CPAZFH2RQ6WD7PKF url
- http://seclists.org/fulldisclosure/2024/Jan/27 url
- http://seclists.org/fulldisclosure/2024/Jan/33 url
- http://seclists.org/fulldisclosure/2024/Jan/34 url
- http://seclists.org/fulldisclosure/2024/Jan/36 url
- http://www.openwall.com/lists/oss-security/2024/02/05/8 url
- https://support.apple.com/kb/HT214061 url
- https://support.apple.com/kb/HT214060 url
- https://support.apple.com/kb/HT214055 url
- https://support.apple.com/en-us/HT214060 url
- https://support.apple.com/en-us/HT214056 url
- http://seclists.org/fulldisclosure/2024/Jan/39 url
…and 8 more