VDB
GHSA-xvhx-jwjw-g589
GHSA-xvhx-jwjw-g589
PUBLISHED
CVSS 7.5 HIGH
Record from GitHub Advisory Database · Published October 28, 2024
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to modify protected parts of the file system.
Risk scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Timeline
- Oct 28, 2024 CVE Published
- May 1, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-xvhx-jwjw-g589
vulnetix vdb fixes GHSA-xvhx-jwjw-g589Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-xvhx-jwjw-g589/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-44196 advisory
- https://support.apple.com/en-us/121564 advisory
- https://support.apple.com/en-us/121568 advisory
- http://seclists.org/fulldisclosure/2024/Oct/13 url
- http://seclists.org/fulldisclosure/2024/Oct/11 url
- http://seclists.org/fulldisclosure/2024/Oct/12 url
- https://support.apple.com/en-us/121570 advisory