CVE-2017-2442
MEDIUM6.5EPSS 12.4%發布日:2017/4/2修改日:2026/4/28
也稱為:DEBIAN-CVE-2017-2442
描述
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit JavaScript Bindings" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
受影響套件(1)
- Debian/webkit2gtkfrom 0, < 2.14.6-1
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM6.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |