CVE-2022-42797: Input Validation
Published Nov 1, 2022
·Updated
An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileges.
Other sources
IDE Xcode Server. An injection issue was addressed with improved input validation.
— Apple
Credit
Tim Michaud@@TimGMichaud(Moveworks)
Affected Software
2 affected componentsFixes available
Apple Xcode<14.1
Apple Xcode<14.1
14.1
Event History
Feb 27, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the vulnerability ID for the injection issue in IDE Xcode Server?
The vulnerability ID for the injection issue in IDE Xcode Server is CVE-2022-42797.
2
What is the severity of CVE-2022-42797?
The severity of CVE-2022-42797 is not specified in the provided information.
3
How does CVE-2022-42797 affect Apple Xcode?
CVE-2022-42797 affects Apple Xcode versions up to 14.1.
4
What is the remediation for CVE-2022-42797?
The remediation for CVE-2022-42797 is to upgrade to version 14.1 of Apple Xcode.
5
Where can I find more information about CVE-2022-42797?
You can find more information about CVE-2022-42797 on the Apple support website: https://support.apple.com/en-us/HT213496