A spoofing issue existed in the handling of URLs. This... · CVE-2022-46705 · GitHub Advisory Database · GitHub

A spoofing issue existed in the handling of URLs. This...

Moderate severity Unreviewed Published Feb 27, 2023 to the GitHub Advisory Database • Updated Nov 24, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious website may lead to address bar spoofing.

References

Published by the National Vulnerability Database

Feb 27, 2023

Published to the GitHub Advisory Database Feb 27, 2023

Last updated Nov 24, 2023

Severity

Moderate

4.3

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N