REDHAT-BUG-2357910: Medium severity Safari vulnerability
A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Safari/iOS/iPadOSto a version that resolves this vulnerability.Fixed in 18.4
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2357910?
REDHAT-BUG-2357910 addresses a permissions issue that could lead to cross-site scripting attacks.
How do I fix REDHAT-BUG-2357910?
To fix REDHAT-BUG-2357910, update your software to Safari 18.4, iOS 18.4, or iPadOS 18.4.
Which software is affected by REDHAT-BUG-2357910?
REDHAT-BUG-2357910 affects Apple Safari, iOS, and iPadOS versions prior to 18.4.
What vulnerabilities does REDHAT-BUG-2357910 address?
REDHAT-BUG-2357910 addresses a permissions issue that may allow cross-site scripting through malicious iframes.
Is there a workaround for REDHAT-BUG-2357910?
No specific workaround for REDHAT-BUG-2357910 is provided; updating to the fixed version is recommended.