Vulnerabilities Leave iTunes, App Store Open to Script Injection (Threatpost)

2017-01-17 21:02

Researchers say iTunes and Apple's App Store suffer from a persistent input validation and mail encoding web vulnerability. If exploited, it could allow an attacker to inject their own malicious script.

News URL

http://threatpost.com/vulnerabilities-leave-itunes-app-store-open-to-script-injection/123129/

#itunes #threatpost #vulnerabilities

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.