Lucene search
HistoryFeb 27, 2023 - 8:15 p.m.
CVE-2022-42797
cve-2022-42797
injection issue
input validation
xcode 14.1
nvd
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
23.0%
An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileges.
Affected configurations
Node
applexcodeRange<14.1
CNA Affected
[
{
"vendor": "Apple",
"product": "Xcode",
"versions": [
{
"version": "unspecified",
"lessThan": "14.1",
"status": "affected",
"versionType": "custom"
}
]
}
]References
Related
nvd
nvd
CVE-2022-42797
2023-02-27 20:15:12
prion
prion
Sql injection
2023-02-27 20:15:00
cvelist
cvelist
CVE-2022-42797
2023-02-27 00:00:00
apple
apple
About the security content of Xcode 14.1
2022-11-01 00:00:00
openvas
openvas
Apple Xcode Security Update (HT213496)
2022-11-03 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
23.0%
Related for CVE-2022-42797