Unscored CVE-2017-13819 EUVD-2017-5334GHSA-939v-xh4g-2mvp

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "HelpViewer" component. A cross…

Published Nov 13, 2017 · Updated Aug 5, 2024 · Assigned by apple

Description

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "HelpViewer" component. A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML by bypassing the Same Origin Policy for quarantined HTML documents.

Advisories 1

WID-SEC-2025-0370 Apple Mac OS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 13, 2025

References

https://support.apple.com/HT208221
1039710 vdb-entry