CVE-2019-8674: XSS
A logic issue was addressed with improved state management. This issue is fixed in iOS 13, Safari 13. Processing maliciously crafted web content may lead to universal cross site scripting.
Other sources
WebKit Page Loading. A logic issue was addressed with improved state management.
WebKitGTK Security Advisory WSA-2019-0005 describes the following issue:
CVE-2019-8674
Impact: Processing maliciously crafted web content may lead to universal cross site scripting. Description: A logic issue was addressed with improved state management.
Versions affected: WebKitGTK before 2.24.4 and WPE WebKit before 2.24.3.
— Red Hat
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2019-8625
- CVE-2019-8719
- CVE-2019-8707
- CVE-2019-8726
- CVE-2019-8728
- CVE-2019-8733
- CVE-2019-8734
- CVE-2019-8735
- CVE-2019-8674
- CVE-2019-8711
- CVE-2019-8732
- CVE-2019-8753
- CVE-2019-8705
- CVE-2019-8592
- CVE-2019-8741
- CVE-2019-8825
- CVE-2019-8760
- CVE-2019-8641
- CVE-2019-8746
- CVE-2019-8718
- CVE-2019-8703
- CVE-2019-8809
- CVE-2019-8709
- CVE-2019-8712
- CVE-2019-8744
- CVE-2019-8717
- CVE-2019-8704
- CVE-2019-8749
- CVE-2019-8756
- CVE-2019-8742
- CVE-2019-8730
- CVE-2019-8708
- CVE-2019-8715
- CVE-2019-8731
- CVE-2019-8727
- CVE-2019-8745
- CVE-2019-8771
- CVE-2019-8764
- CVE-2019-8768
- CVE-2019-8854
Frequently Asked Questions
What is the severity of CVE-2019-8674?
The severity of CVE-2019-8674 is medium.
How does CVE-2019-8674 affect Apple Safari?
CVE-2019-8674 affects Apple Safari versions up to and excluding 13, allowing for universal cross-site scripting when processing malicious web content.
How does CVE-2019-8674 affect Apple iPhone OS?
CVE-2019-8674 affects Apple iPhone OS versions up to and excluding 13.0, allowing for universal cross-site scripting when processing malicious web content.
How does CVE-2019-8674 affect WebKitGTK WebKitGTK?
CVE-2019-8674 affects WebKitGTK WebKitGTK versions up to and excluding 2.26.4, allowing for universal cross-site scripting when processing malicious web content.
How do I fix CVE-2019-8674 in Apple Safari?
CVE-2019-8674 is fixed in Apple Safari 13, so updating to the latest version will resolve the vulnerability.
How do I fix CVE-2019-8674 in Apple iPhone OS?
CVE-2019-8674 is fixed in Apple iPhone OS 13.0, so updating to the latest version will resolve the vulnerability.
How do I fix CVE-2019-8674 in WebKitGTK WebKitGTK?
To fix CVE-2019-8674 in WebKitGTK WebKitGTK, update to version 2.26.4 or later.