Information Exposure Affecting webkitgtk4-jsc package, versions *
Threat Intelligence
EPSS
0.18% (57th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-RHEL7-WEBKITGTK4JSC-5884015
- published 6 Sep 2023
- disclosed 21 Apr 2023
Introduced: 21 Apr 2023
CVE-2023-27954 Open this link in a new tabHow to fix?
There is no fixed version for RHEL:7 webkitgtk4-jsc.
NVD Description
Note: Versions mentioned in the description apply only to the upstream webkitgtk4-jsc package and not the webkitgtk4-jsc package as distributed by RHEL.
See How to fix? for RHEL:7 relevant fixed versions and status.
The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information.
References
- https://access.redhat.com/security/cve/CVE-2023-27954
- https://lists.debian.org/debian-lts-announce/2023/05/msg00011.html
- https://support.apple.com/en-us/HT213670
- https://support.apple.com/en-us/HT213671
- https://support.apple.com/en-us/HT213673
- https://support.apple.com/en-us/HT213674
- https://support.apple.com/en-us/HT213676
- https://support.apple.com/en-us/HT213678
- http://seclists.org/fulldisclosure/2023/May/7
- https://security.gentoo.org/glsa/202305-32
CVSS Scores
version 3.1