CVE-2023-32370

· MEDIUMModified

← All CVEs

CVSS v3.1

5.3

EPSS

0.65%

Published

Sep 5, 2023

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Policy to block domains with wildcards may fail.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected Products (3)

apple · macos (up to 13.3)vulnerable

webkitgtk · webkitgtk (up to 2.40.1)vulnerable

wpewebkit · wpe_webkit (up to 2.40.1)vulnerable

References (6)

http://www.openwall.com/lists/oss-security/2023/09/11/1

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/202401-04

https://support.apple.com/en-us/HT213670

Release NotesVendor Advisory

http://www.openwall.com/lists/oss-security/2023/09/11/1

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/202401-04

https://support.apple.com/en-us/HT213670

Release NotesVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs