Unrated severityNVD Advisory· Published Apr 3, 2019· Updated Aug 5, 2024
CVE-2018-4309
CVE-2018-4309
Description
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Affected products
19- Range: <12
- osv-coords18 versionspkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.0pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP4pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%207
< 2.22.5-lp150.2.9.1+ 17 more
- (no CPE)range: < 2.22.5-lp150.2.9.1
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.5-3.13.1
- (no CPE)range: < 2.22.5-3.13.1
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- support.apple.com/kb/HT209106mitrex_refsource_MISC
- support.apple.com/kb/HT209107mitrex_refsource_MISC
- support.apple.com/kb/HT209109mitrex_refsource_MISC
- support.apple.com/kb/HT209140mitrex_refsource_MISC
- support.apple.com/kb/HT209141mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.