NVD Vulnerability Detail

CVE-2021-30890

Summary	A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to universal cross site scripting.
Publication Date	Aug. 25, 2021, 4:15 a.m.
Registration Date	Aug. 25, 2021, 10:01 a.m.
Last Update	Nov. 21, 2024, 3:04 p.m.

Affected software configurations

Related information, measures and tools

No	URL	refsource	タグ
1	http://www.openwall.com/lists/oss-security/2021/12/20/6
2	http://www.openwall.com/lists/oss-security/2021/12/20/6
3	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
4	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
5	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
6	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
7	https://support.apple.com/en-us/HT212867
8	https://support.apple.com/en-us/HT212867
9	https://support.apple.com/en-us/HT212869
10	https://support.apple.com/en-us/HT212869
11	https://support.apple.com/en-us/HT212874
12	https://support.apple.com/en-us/HT212874
13	https://support.apple.com/en-us/HT212876
14	https://support.apple.com/en-us/HT212876
15	https://www.debian.org/security/2021/dsa-5030
16	https://www.debian.org/security/2021/dsa-5030
17	https://www.debian.org/security/2021/dsa-5031
18	https://www.debian.org/security/2021/dsa-5031

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-79	クロスサイト・スクリプティング（XSS）	https://cwe.mitre.org/data/definitions/79.html

JVN Vulnerability Information

アップルの iPadOS 等複数ベンダの製品におけるクロスサイトスクリプティングの脆弱性

Title	アップルの iPadOS 等複数ベンダの製品におけるクロスサイトスクリプティングの脆弱性
Summary	アップルの iPadOS 等複数ベンダの製品には、クロスサイトスクリプティングの脆弱性が存在します。
Possible impacts	情報を取得される、および情報を改ざんされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Aug. 24, 2021, midnight
Registration Date	July 18, 2024, 5:36 p.m.
Last Update	July 18, 2024, 5:36 p.m.

Affected System

アップル

iOS 15.1 未満

iPadOS 15.1 未満

macOS 12.0.1 未満

tvOS 15.1 未満

watchOS 8.1 未満

Debian

Debian GNU/Linux 10.0

Debian GNU/Linux 11.0

Fedora Project

Fedora 34

Fedora 35

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2021-30890	https://www.cve.org/CVERecord?id=CVE-2021-30890
National Vulnerability Database (NVD)
2	CVE-2021-30890	https://nvd.nist.gov/vuln/detail/CVE-2021-30890

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-79	https://jvndb.jvn.jp/ja/cwe/CWE-79.html

ベンダー情報

No	Name	URL
Apple Security Updates
1	HT212867	https://support.apple.com/en-us/HT212867
2	HT212869	https://support.apple.com/en-us/HT212869
3	HT212874	https://support.apple.com/en-us/HT212874
4	HT212876	https://support.apple.com/en-us/HT212876
Apple セキュリティアップデート
5	HT212867	https://support.apple.com/ja-jp/HT212867
6	HT212869	https://support.apple.com/ja-jp/HT212869
7	HT212874	https://support.apple.com/ja-jp/HT212874
8	HT212876	https://support.apple.com/ja-jp/HT212876
Debian
9	[SECURITY] [DSA 5030-1] webkit2gtk security update	https://www.debian.org/security/2021/dsa-5030
10	[SECURITY] [DSA 5031-1] wpewebkit security update	https://www.debian.org/security/2021/dsa-5031
Fedora Update Notification
11	FEDORA-2022-25a98f5d55	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
12	FEDORA-2022-f7366e60cb	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/

その他

No	Name	URL
関連文書
1	www.openwall.com (oss-security/2021/12/20/6)	http://www.openwall.com/lists/oss-security/2021/12/20/6

Change Log

No	Changed Details	Date of change
1	[2024年07月17日] 掲載	July 17, 2024, 5:45 p.m.