CVE-2019-6228

State: PUBLISHED · Published: 2019-03-05 · Updated: 2024-08-04 · Assigner: apple

Description

A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue is fixed in iOS 12.1.3, Safari 12.0.3. Processing maliciously crafted web content may lead to a cross site scripting attack.

CWE

(none)

Affected

Apple / iOS — v=unspecified <iOS 12.1.3 [affected]
Apple / Safari — v=unspecified <Safari 12.0.3 [affected]

CVSS

(none)

References

https://support.apple.com/HT209443 x_refsource_CONFIRM
https://support.apple.com/HT209449 x_refsource_CONFIRM
http://www.securityfocus.com/bid/106692 vdb-entry, x_refsource_BID

Source

cvelistV5-main/cves/2019/6xxx/CVE-2019-6228.json