CVE-2021-1800

A path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4. A malicious application may be able to access arbitrary files on the host device while running an app that uses on-demand resources with Xcode.

Score

CVSS 3.1 5.5 Medium

Status

Modified - product-security@apple.com

Published

2021-04-02

Last modified

2024-08-03

Affected products

• Xcode (Apple)

References

• https://support.apple.com/en-us/HT212153