VDB
GHSA-rxx7-h6g2-884v
GHSA-rxx7-h6g2-884v
PUBLISHED
CVSS 6.099999904632568 MEDIUM
Record from GitHub Advisory Database · Published May 14, 2022
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with frame loading.
Risk scores
CVSS 3.0
6.099999904632568
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Timeline
- May 14, 2022 CVE Published
- Apr 9, 2026 Security Advisory (2 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-rxx7-h6g2-884v
vulnetix vdb fixes GHSA-rxx7-h6g2-884vOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-rxx7-h6g2-884v/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-2549 advisory
- http://www.securityfocus.com/bid/98473 url
- http://www.securitytracker.com/id/1038487 url
- https://support.apple.com/HT207798 advisory
- https://support.apple.com/HT207804 advisory
- https://support.apple.com/HT207801 advisory
- https://security.gentoo.org/glsa/201706-15 advisory