CVE-2021-30887

MEDIUM6.5EPSS 1.2%

wpewebkit - security update

發布日:2021/8/24修改日:2026/3/9

也稱為:DSA-5031-1DEBIAN-CVE-2021-30887DEBIAN-CVE-2021-30890

描述

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to unexpectedly unenforced Content Security Policy.

受影響套件(4)

Debian/webkit2gtkfrom 0, < 2.34.3-1~deb11u1
Debian/webkit2gtkfrom 0, < 2.34.3-1~deb10u1
Debian/wpewebkitfrom 0, < 2.34.3-1~deb11u1
Debian/wpewebkitfrom 0, < 2.34.3-1~deb11u1

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM6.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2021-30887