Skip to content
OpenAdvisories
Unscored CVE-2019-6228 EUVD-2019-15795GHSA-px8f-q952-776q

A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue is fixed in iOS 12.1.3, S…

Published Mar 5, 2019 · Updated Aug 4, 2024 · Assigned by apple

Vendor: Apple Product: iOS Product: Safari Platform: iOS Category: Browsers

Description

A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue is fixed in iOS 12.1.3, Safari 12.0.3. Processing maliciously crafted web content may lead to a cross site scripting attack.

Affected products

VendorProductAffectedFixed
Apple iOS unspecified – < iOS 12.1.3 iOS 12.1.3
Apple Safari unspecified – < Safari 12.0.3 Safari 12.0.3

References