CVE-2020-9995 - An issue existed in the parsing of URLs

Back Back to CVE browser

MEDIUM

An issue existed in the parsing of URLs

Published Apr 2, 2021

6.1

MEDIUM

CVSS 3.1

EPSS 0.59%

Description

An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Server 5.11. Processing a maliciously crafted URL may lead to an open redirect or cross site scripting.

Affected products

Vendor Apple Product macOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <5.11

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Apple

macOS

n/a

Version	Status	Constraints
unspecified	affected	<5.11

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-601

Open Redirect

CWE-79

Cross-site Scripting (XSS)

References (1)

https://support.apple.com/en-us/HT211932
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://support.apple.com/en-us/HT211932		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Apr 2, 2021

Updated Aug 4, 2024

Reserved Mar 2, 2020

Link CVE-2020-9995

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-9995

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-9995