References https://nvd.nist.gov/vuln/detail/CVE-2023-42914 https://support.apple.com/en-us/120879 https://support.apple.com/en-us/120878 https://support.apple.com/en-us/120876 https://www.secpod.com/blog/apples-december-2023-updates-addresses-multiple-security-vulnerabilities/ https://its.ny.gov/2023-139 https://cve.imfht.com/detail/CVE-2023-42914?lang=en https://radar.offseq.com/threat/cve-2023-42914-an-app-may-be-able-to-break-out-of--4e2fc4f2 https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20231212
Related Vulnerabilities仁和兴业(深圳)软件有限公司仁和云ERP weChatAppletgetGoodsList.action 存在SSRF漏洞仁和兴业(深圳)软件有限公司仁和云ERP purchaseOrdersaveOrderApplet.action存在反序列化漏洞关于U8cloud所有版本u8capplet.jsp存在XSS漏洞的安全公告PoCCVE-2022-35413: WAPPLES Web Application Firewall <=6.0 - Hardcoded CredentialsPoCapple-cups-exposure: Apple CUPS Sources - ExposurePoCapplezeed-sqli: Applezeed - SQL InjectionPoCwapples-firewall-lfi: Wapples Web Application Firewall - Local File InclusionApple Filing Protocol(AFP) 未授权访问漏洞关于NC及NC Cloud系统的wsncapplet.jsp信息泄漏漏洞的安全通告Multiple Apple products CVE-2018-4222越界读取漏洞Apple Filing Protocol(AFP) 弱口令漏洞Apple Webkit CVE-2021-1879 释放后重利用漏洞Apple多个产品条件竞争漏洞(CVE-2023-42974)