VDB
GHSA-v277-v42g-mwrm
GHSA-v277-v42g-mwrm
PUBLISHED
CVSS 7.5 HIGH
Record from GitHub Advisory Database · Published May 8, 2023
The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, watchOS 9.4, iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4. A shortcut may be able to use sensitive data with certain actions without prompting the user
Risk scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Timeline
- May 8, 2023 CVE Published
- May 1, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-v277-v42g-mwrm
vulnetix vdb fixes GHSA-v277-v42g-mwrmOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-v277-v42g-mwrm/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-27963 advisory
- http://seclists.org/fulldisclosure/2023/May/7 url
- https://support.apple.com/en-us/HT213670 advisory
- https://support.apple.com/en-us/HT213673 advisory
- https://support.apple.com/en-us/HT213674 advisory
- https://support.apple.com/kb/HT213674 advisory
- https://support.apple.com/en-us/HT213677 advisory
- https://support.apple.com/en-us/HT213678 advisory
- https://support.apple.com/en-us/HT213676 advisory