Mac OS X Local Javascript Quarantine Bypass Vulnerability

[hkabik]

https://www.wearesegment.com/research/Mac-OS-X-Local-Javascript-Quarantine-Bypass.html

Of course the file is protected by SIP, so removal is not so simple.

[mm2270]

Looks like the fix for it is in High Sierra, but not rolled back to previous OSes, not even 10.11. Great.