CVEvulnerability
CVE-2023-42843
4.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-02-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-290
Description
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, Safari 17.1, macOS Sonoma 14.1. Visiting a malicious website may lead to address bar spoofing.
Affected configurations
• apple safari (< 17.1)
• apple ipad os (< 16.7.2)
• apple ipad os (>= 17.0 < 17.1)
• apple iphone os (< 16.7.2)
• apple iphone os (>= 17.0 < 17.1)
• apple macos 14.0
• fedoraproject fedora 40
• webkitgtk webkitgtk (< 2.44.0)
• wpewebkit wpe webkit (< 2.44.0)
Related
Weakness · CWE (1)
- CWE-290 Authentication Bypass by Spoofing weakness
References
- http://www.openwall.com/lists/oss-security/2024/03/26/1 Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/[email protected]/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4/ Mailing List
- https://support.apple.com/en-us/HT213981 Vendor Advisory
- https://support.apple.com/en-us/HT213982 Vendor Advisory
- https://support.apple.com/en-us/HT213984 Vendor Advisory
- https://support.apple.com/en-us/HT213986 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2024/03/26/1 Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/[email protected]/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4/ Mailing List
- https://support.apple.com/en-us/HT213981 Vendor Advisory
- https://support.apple.com/en-us/HT213982 Vendor Advisory
- https://support.apple.com/en-us/HT213984 Vendor Advisory
- https://support.apple.com/en-us/HT213986 Vendor Advisory