VDB
GHSA-xg2v-xmf4-698r
GHSA-xg2v-xmf4-698r
PUBLISHED
CVSS 6.099999904632568 MEDIUM
Record from GitHub Advisory Database · Published May 17, 2022
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with cached frames.
Risk scores
CVSS 3.0
6.099999904632568
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Timeline
- May 17, 2022 CVE Published
- Apr 9, 2026 Security Advisory (2 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-xg2v-xmf4-698r
vulnetix vdb fixes GHSA-xg2v-xmf4-698rOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-xg2v-xmf4-698r/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-2528 advisory
- http://www.securityfocus.com/bid/98474 url
- http://www.securitytracker.com/id/1038487 url
- https://security.gentoo.org/glsa/201706-15 advisory
- https://support.apple.com/HT207798 advisory
- https://support.apple.com/HT207804 advisory
- https://www.exploit-db.com/exploits/42105 exploit