CVE-2023-42843 — MEDIUM (4.3)

Q: How severe is CVE-2023-42843?

CVE-2023-42843 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2023-42843?

Check the references section above for vendor advisories and patch information. Affected products include: Apple Safari, Apple Ipad Os, Apple Iphone Os, Apple Macos, Fedoraproject Fedora.

Vulnerability Description

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, Safari 17.1, macOS Sonoma 14.1. Visiting a malicious website may lead to address bar spoofing.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Apple	Safari	< 17.1
Apple	Ipad Os	< 16.7.2
Apple	Iphone Os	< 16.7.2
Apple	Macos	14.0
Fedoraproject	Fedora	40
Webkitgtk	Webkitgtk	< 2.44.0
Wpewebkit	Wpe Webkit	< 2.44.0

Related Weaknesses (CWE)

CWE-290

References

http://www.openwall.com/lists/oss-security/2024/03/26/1Mailing ListThird Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]Mailing List
https://support.apple.com/en-us/HT213981Vendor Advisory
https://support.apple.com/en-us/HT213982Vendor Advisory
https://support.apple.com/en-us/HT213984Vendor Advisory
https://support.apple.com/en-us/HT213986Vendor Advisory
http://www.openwall.com/lists/oss-security/2024/03/26/1Mailing ListThird Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]Mailing List
https://support.apple.com/en-us/HT213981Vendor Advisory
https://support.apple.com/en-us/HT213982Vendor Advisory
https://support.apple.com/en-us/HT213984Vendor Advisory
https://support.apple.com/en-us/HT213986Vendor Advisory

FAQ

What is CVE-2023-42843?

CVE-2023-42843 is a vulnerability with a CVSS score of 4.3 (MEDIUM). An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, Safari 17.1, macOS Sonoma 14.1. Visiti...

How severe is CVE-2023-42843?

CVE-2023-42843 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-42843?

Check the references section above for vendor advisories and patch information. Affected products include: Apple Safari, Apple Ipad Os, Apple Iphone Os, Apple Macos, Fedoraproject Fedora.