Vulnerabilities

TI-2024-36614 CVE-2024-54540 · GHSA-jw5g-j894-hv7p

Cross-site scripting in Apple Music

LOW 24

The issue was addressed with improved input sanitization.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0021 Published 2025-01-15 Fixed in 1.5.0 CWE-79

TI-2023-12767 CVE-2023-28203 · GHSA-6w6c-rmc6-wccw

LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00194 Published 2023-07-28 Fixed in 4.2 CWE-200

TI-2023-15716 CVE-2023-32427 · GHSA-rg97-m354-39g3

LOW 27

This issue was addressed by using HTTPS when sending information over the network.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00433 Published 2023-07-28 Fixed in 4.2

TI-2022-14432 CVE-2022-32906 · GHSA-fr43-5hh3-gm58

LOW 24

This issue was addressed with using HTTPS when sending information over the network.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00353 Published 2023-02-27 Fixed in 3.9 CWE-319

TI-2022-14380 CVE-2022-32846 · GHSA-wj5g-5xxg-2f92

MEDIUM 40

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00613 Published 2023-02-27 Fixed in 3.9 CWE-664

TI-2022-14370 CVE-2022-32836 · GHSA-jv4h-v7cw-4f5c

MEDIUM 40

This issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00552 Published 2023-02-27 Fixed in 3.9 CWE-200

TI-2021-21529 CVE-2021-46841 · GHSA-9283-fvg2-gf6j

LOW 27

This issue was addressed by using HTTPS when sending information over the network.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00468 Published 2023-02-27 Fixed in 3.5 CWE-200

TI-2020-08052 CVE-2020-9982 · GHSA-fxj8-h239-6vrg

LOW 26

This issue was addressed with improved checks to prevent unauthorized actions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00759 Published 2020-10-27 Fixed in 3.4