CVE-2021-30862: Apple iTunes U

Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days.

A validation issue was addressed with improved input sanitization. This issue is fixed in iTunes U 3.8.3. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.

Affected products

• Apple iTunes U: before 3.8.3 (fixed in 3.8.3)

Published 2021-08-24. Last modified 2026-06-17.