CVE-2021-30888

Description

An information leakage issue was addressed. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1. A malicious website using Content Security Policy reports may be able to leak information via redirect behavior .

References

https://support.apple.com/en-us/HT212876

https://support.apple.com/en-us/HT212874

https://support.apple.com/en-us/HT212869

https://support.apple.com/en-us/HT212868

https://support.apple.com/en-us/HT212867

http://www.openwall.com/lists/oss-security/2021/12/20/6

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3