VDB
GHSA-vrg7-4cjp-whcv
GHSA-vrg7-4cjp-whcv
PUBLISHED
CVSS 5.5 MEDIUM
Record from GitHub Advisory Database · Published December 12, 2023
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, macOS Ventura 13.6.3, iOS 16.7.3 and iPadOS 16.7.3, macOS Monterey 12.7.2. An app may be able to read sensitive location information.
Risk scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Timeline
- Dec 12, 2023 CVE Published
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-vrg7-4cjp-whcv
vulnetix vdb fixes GHSA-vrg7-4cjp-whcvOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-vrg7-4cjp-whcv/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- http://seclists.org/fulldisclosure/2023/Dec/11 url
- http://seclists.org/fulldisclosure/2023/Dec/8 url
- https://nvd.nist.gov/vuln/detail/CVE-2023-42922 advisory
- http://seclists.org/fulldisclosure/2023/Dec/10 url
- http://seclists.org/fulldisclosure/2023/Dec/7 url
- http://seclists.org/fulldisclosure/2023/Dec/9 url
- https://support.apple.com/en-us/HT214034 advisory
- https://support.apple.com/en-us/HT214035 advisory
- https://support.apple.com/en-us/HT214037 advisory
- https://support.apple.com/en-us/HT214038 advisory
- https://support.apple.com/kb/HT214035 advisory
- https://support.apple.com/kb/HT214038 advisory
- https://support.apple.com/en-us/HT214036 advisory
- https://support.apple.com/kb/HT214036 advisory
- https://support.apple.com/kb/HT214037 advisory