CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2019-7289 – Apple Security Advisory 2019-2-07-3
https://notcve.org/view.php?id=CVE-2019-7289
07 Feb 2019 — A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Shortcuts 2.1.3 for iOS. A local user may be able to view senstive user information. Se solucionó un problema de análisis en el manejo de rutas de directorio mejorando la comprobación de ruta. Este problema es corregido en Shortcuts versión 2.1.3 para iOS. • https://support.apple.com/HT209522 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2019-7290 – Apple Security Advisory 2019-2-07-3
https://notcve.org/view.php?id=CVE-2019-7290
07 Feb 2019 — An access issue was addressed with additional sandbox restrictions. This issue is fixed in Shortcuts 2.1.3 for iOS. A sandboxed process may be able to circumvent sandbox restrictions. Un problema de acceso fue abordado con restricciones de sandbox adicionales. Este problema es corregido en Shortcuts versión 2.1.3 para iOS. • https://support.apple.com/HT209522 • CWE-610: Externally Controlled Reference to a Resource in Another Sphere •