cve/2021/CVE-2021-1748.md

CVE-2021-1748

Description

A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.

POC

Reference

No PoCs from references.

Github

• https://github.com/ChiChou/mistune-patch-backport
• https://github.com/Ivanhoe76zzzz/itmsBlock
• https://github.com/k0mi-tg/CVE-POC
• https://github.com/manas3c/CVE-POC
• https://github.com/n0-traces/cve_monitor
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/whoforget/CVE-POC
• https://github.com/youwizard/CVE-POC