CVE-2021-30862

Summary

A validation issue was addressed with improved input sanitization. This issue is fixed in iTunes U 3.8.3. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.

Affected Software

VendorProductVersion RangeStatus
AppleiTunes Uunspecified < 3.8affected

Weaknesses

  • Processing a maliciously crafted URL may lead to arbitrary javascript code execution

ADP Enrichment

CVE Program Container

Additional References

References