VDB
GHSA-8g69-6rgj-v638
GHSA-8g69-6rgj-v638
PUBLISHED
CVSS 5.5 MEDIUM
Record from GitHub Advisory Database · Published March 8, 2024
This issue was addressed with improved file handling. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to access sensitive user data.
Risk scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Timeline
- Mar 8, 2024 CVE Published
- Apr 26, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-8g69-6rgj-v638
vulnetix vdb fixes GHSA-8g69-6rgj-v638
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-8g69-6rgj-v638/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://support.apple.com/en-us/120884 url
- https://support.apple.com/en-us/120886 url
- https://support.apple.com/en-us/HT214084 url
- https://support.apple.com/kb/HT214085 url
- https://support.apple.com/en-us/120895 url
- https://support.apple.com/kb/HT214083 url
- https://nvd.nist.gov/vuln/detail/CVE-2024-23230 advisory
- https://support.apple.com/en-us/HT214085 url
- https://support.apple.com/kb/HT214084 url
- http://seclists.org/fulldisclosure/2024/Mar/21 url
- http://seclists.org/fulldisclosure/2024/Mar/23 url
- https://support.apple.com/en-us/HT214083 url
- http://seclists.org/fulldisclosure/2024/Mar/22 url