CVE-2021-30887 | Apple iOS/iPadOS up to 15.0.2 WebKit cross-domain policy (HT212867 / Nessus ID 236537)
A vulnerability, which was classified as critical, was found in Apple iOS and iPadOS up to 15.0.2. This affects an unknown part of the component WebKit. The manipulation leads to permissive cross-domain policy with untrusted domains.
This vulnerability is uniquely identified as CVE-2021-30887. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.