CVE-2020-3902: Input Validation
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to a cross site scripting attack.
Other sources
WebKit. An input validation issue was addressed with improved input validation.
WebKitGTK Security Advisory WSA-2020-0005 describes the following issue:
CVE-2020-3902
Impact: Processing maliciously crafted web content may lead to a cross site scripting attack. Description: An input validation issue was addressed with improved input validation.
Versions affected: WebKitGTK before 2.28.0 and WPE WebKit before 2.28.0.
— Red Hat
Credit
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2020-9772
- CVE-2020-3903
- CVE-2020-3904
- CVE-2020-3883
- CVE-2020-6616
- CVE-2020-9853
- CVE-2020-3907
- CVE-2020-3908
- CVE-2020-3912
- CVE-2020-9779
- CVE-2020-3892
- CVE-2020-3893
- CVE-2020-3905
- CVE-2019-8853
- CVE-2020-9776
- CVE-2020-9828
- CVE-2020-3913
- CVE-2020-9829
- CVE-2020-3898
- CVE-2020-3881
- CVE-2020-3886
- CVE-2019-14615
- CVE-2020-3919
- CVE-2020-3851
- CVE-2020-3896
- CVE-2020-3914
- CVE-2020-9785
- CVE-2020-3909
- CVE-2020-3911
- CVE-2020-3910
- CVE-2020-3884
- CVE-2020-3915
- CVE-2020-9775
- CVE-2020-9771
- CVE-2020-3918
- CVE-2019-19232
- CVE-2020-9786
- CVE-2020-3906
- CVE-2020-3889
- CVE-2020-9769
- CVE-2020-9787
- CVE-2020-3902
- CVE-2020-3917
- CVE-2020-9768
- CVE-2020-3895
- CVE-2020-3900
- CVE-2020-3894
- CVE-2020-3899
- CVE-2020-3901
- CVE-2020-3887
- CVE-2020-9783
- CVE-2020-3897
- CVE-2020-3885
- CVE-2020-9784
- CVE-2020-9770
- CVE-2020-3916
- CVE-2020-9780
- CVE-2020-9777
- CVE-2020-3891
- CVE-2020-3890
- CVE-2020-9781
- CVE-2020-3888
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-3902.
Which software versions are affected by this vulnerability?
The affected software versions include Apple Safari 13.1, Apple iOS up to version 13.4, Apple iPadOS up to version 13.4, Apple iTunes for Windows up to version 12.10.5, Apple iCloud for Windows up to version 10.9.3, Apple macOS Catalina up to version 10.15.4, Apple Mojave, Apple High Sierra, and Apple This document describes the security content of tvOS up to version 13.4.
What is the severity of CVE-2020-3902?
The severity of CVE-2020-3902 is not specified in the provided information.
What is the remedy for this vulnerability?
The exact remedy for this vulnerability depends on the affected software version, please refer to the provided Apple support links for more information on how to address this vulnerability.
Where can I find more information about CVE-2020-3902?
You can find more information about CVE-2020-3902 in the provided Apple support links: [Support Link 1](https://support.apple.com/en-us/HT211102), [Support Link 2](https://support.apple.com/en-us/HT211100), [Support Link 3](https://support.apple.com/en-us/HT211104).