Description (CNA)
A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. A shortcut may output sensitive user data without consent.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apple / iOS and iPadOS | affected 0 before 17.5 |
| Apple / macOS | affected 0 before 14.5 |
| Apple / watchOS | affected 0 before 10.5 |
CWE
No CWE identifiers supplied.
References
- https://support.apple.com/en-us/120902
- https://support.apple.com/en-us/120903
- https://support.apple.com/en-us/120905
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
- https://support.apple.com/en-us/HT214101
- https://support.apple.com/en-us/HT214106
- https://support.apple.com/en-us/HT214104
- http://seclists.org/fulldisclosure/2024/May/10
- https://support.apple.com/kb/HT214104
- https://support.apple.com/kb/HT214106
- http://seclists.org/fulldisclosure/2024/May/12
- http://seclists.org/fulldisclosure/2024/May/16
- https://support.apple.com/kb/HT214101