Description (CNA)
A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, Safari 12.1. Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apple / iOS | affected unspecified before iOS 12.2 |
| Apple / Safari | affected unspecified before Safari 12.1 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.