Directory Path Parsing Vulnerability in Shortcuts for iOS by Apple
CVE-2019-7289

5.5MEDIUM

Key Information:

Vendor
Apple
Status
Shortcuts
Vendor
CVE Published:
18 December 2019

Summary

A vulnerability in the Shortcuts app for iOS related to directory path parsing could allow a local user to access sensitive information. This issue stemmed from improper path validation, which has been addressed in version 2.1.3. Users are advised to update their apps to mitigate potential risks associated with this vulnerability.

Affected Version(s)

Shortcuts < unspecified

References

https://support.apple.com/HT209522
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.