CVEvulnerability

CVE-2023-27954

6.5 MEDIUM Published 2023-05-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-05-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weaknesses
CWE-863

Description

The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information.

Affected configurations

• apple safari (< 16.4) • apple ipados (< 15.7.4) • apple ipados (>= 16.0 < 16.4) • apple iphone os (< 15.7.4) • apple iphone os (>= 16.0 < 16.4) • apple macos (>= 13.0 < 13.3) • apple tvos (< 16.4) • apple watchos (< 9.4) • debian debian linux 10.0

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References