CVE-2024-23271

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-23271
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3, Safari 17.3, tvOS 17.3, macOS Sonoma 14.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.apple.com/en-us/HT214055 Vendor Advisory
https://support.apple.com/en-us/HT214056 Vendor Advisory
https://support.apple.com/en-us/HT214059 Vendor Advisory
https://support.apple.com/en-us/HT214060 Vendor Advisory
https://support.apple.com/en-us/HT214061 Vendor Advisory
https://support.apple.com/kb/HT214055 Vendor Advisory
https://support.apple.com/kb/HT214056 Vendor Advisory
https://support.apple.com/kb/HT214059 Vendor Advisory
https://support.apple.com/kb/HT214060 Vendor Advisory
https://support.apple.com/kb/HT214061 Vendor Advisory
https://support.apple.com/en-us/HT214055 Vendor Advisory
https://support.apple.com/en-us/HT214056 Vendor Advisory
https://support.apple.com/en-us/HT214059 Vendor Advisory
https://support.apple.com/en-us/HT214060 Vendor Advisory
https://support.apple.com/en-us/HT214061 Vendor Advisory
https://support.apple.com/kb/HT214055 Vendor Advisory
https://support.apple.com/kb/HT214056 Vendor Advisory
https://support.apple.com/kb/HT214059 Vendor Advisory
https://support.apple.com/kb/HT214060 Vendor Advisory
https://support.apple.com/kb/HT214061 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
History

12 Dec 2024, 14:33

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.3 		v2 : unknown
v3 : 6.5
First Time Apple safari
Apple
Apple macos
Apple iphone Os
Apple tvos
Apple watchos
Apple ipados
CWE NVD-CWE-noinfo
References () https://support.apple.com/en-us/HT214055 - () https://support.apple.com/en-us/HT214055 - Vendor Advisory
References () https://support.apple.com/en-us/HT214056 - () https://support.apple.com/en-us/HT214056 - Vendor Advisory
References () https://support.apple.com/en-us/HT214059 - () https://support.apple.com/en-us/HT214059 - Vendor Advisory
References () https://support.apple.com/en-us/HT214060 - () https://support.apple.com/en-us/HT214060 - Vendor Advisory
References () https://support.apple.com/en-us/HT214061 - () https://support.apple.com/en-us/HT214061 - Vendor Advisory
References () https://support.apple.com/kb/HT214055 - () https://support.apple.com/kb/HT214055 - Vendor Advisory
References () https://support.apple.com/kb/HT214056 - () https://support.apple.com/kb/HT214056 - Vendor Advisory
References () https://support.apple.com/kb/HT214059 - () https://support.apple.com/kb/HT214059 - Vendor Advisory
References () https://support.apple.com/kb/HT214060 - () https://support.apple.com/kb/HT214060 - Vendor Advisory
References () https://support.apple.com/kb/HT214061 - () https://support.apple.com/kb/HT214061 - Vendor Advisory
CPE cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

21 Nov 2024, 08:57

Type Values Removed Values Added
References () https://support.apple.com/en-us/HT214055 - () https://support.apple.com/en-us/HT214055 -
References () https://support.apple.com/en-us/HT214056 - () https://support.apple.com/en-us/HT214056 -
References () https://support.apple.com/en-us/HT214059 - () https://support.apple.com/en-us/HT214059 -
References () https://support.apple.com/en-us/HT214060 - () https://support.apple.com/en-us/HT214060 -
References () https://support.apple.com/en-us/HT214061 - () https://support.apple.com/en-us/HT214061 -
References () https://support.apple.com/kb/HT214055 - () https://support.apple.com/kb/HT214055 -
References () https://support.apple.com/kb/HT214056 - () https://support.apple.com/kb/HT214056 -
References () https://support.apple.com/kb/HT214059 - () https://support.apple.com/kb/HT214059 -
References () https://support.apple.com/kb/HT214060 - () https://support.apple.com/kb/HT214060 -
References () https://support.apple.com/kb/HT214061 - () https://support.apple.com/kb/HT214061 -

03 Jul 2024, 01:47

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.3
CWE CWE-284

12 Jun 2024, 10:15

Type Values Removed Values Added
References
  • () https://support.apple.com/kb/HT214055 -
  • () https://support.apple.com/kb/HT214056 -
  • () https://support.apple.com/kb/HT214059 -

10 Jun 2024, 16:15

Type Values Removed Values Added
References
  • () https://support.apple.com/kb/HT214060 -
  • () https://support.apple.com/kb/HT214061 -
Summary
  • (es) Se solucionó un problema de lógica con controles mejorados. Este problema se solucionó en iOS 17.3 y iPadOS 17.3, Safari 17.3, tvOS 17.3, macOS Sonoma 14.3, watchOS 10.3. Un sitio web malicioso puede provocar un comportamiento inesperado entre orígenes.

24 Apr 2024, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-24 17:15

Updated : 2024-12-12 14:33

NVD link : CVE-2024-23271

Mitre link : CVE-2024-23271

CVE.ORG link : CVE-2024-23271

JSON object : View

Products Affected

apple

  • iphone_os
  • safari
  • watchos
  • tvos
  • macos
  • ipados
CWE
NVD-CWE-noinfo CWE-284

Improper Access Control