A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to universal cross site scripting.
References
Link Resource
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html Mailing List Patch Third Party Advisory
https://security.gentoo.org/glsa/202003-22 Third Party Advisory
https://support.apple.com/HT210947 Release Notes Vendor Advisory
https://support.apple.com/HT210948 Release Notes Vendor Advisory
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: apple

Published: 2020-02-27T20:45:05

Updated: 2020-03-15T06:06:28

Reserved: 2019-12-18T00:00:00


Link: CVE-2020-3867

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2020-02-27T21:15:18.130

Modified: 2021-12-22T18:04:46.427


Link: CVE-2020-3867

JSON object: View

cve-icon Redhat Information

No data.

CWE