Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4g2f-wf65-x5xp

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection (aka 3xx) status code to a plugin, which allows remote attackers to bypass intended request restrictions via a crafted web site.

The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection (aka 3xx) status code to a plugin, which allows remote attackers to bypass intended request restrictions via a crafted web site.

EPSS

Процентиль: 73%
0.00779
Низкий

Дефекты

CWE-20

Связанные уязвимости

ubuntu
больше 10 лет назад

The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection (aka 3xx) status code to a plugin, which allows remote attackers to bypass intended request restrictions via a crafted web site.

nvd
больше 10 лет назад

The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection (aka 3xx) status code to a plugin, which allows remote attackers to bypass intended request restrictions via a crafted web site.

fstec
больше 10 лет назад

Уязвимость браузера Safari, позволяющая нарушителю обойти существующие ограничения на отправку запросов

suse-cvrf
почти 10 лет назад

Security update for webkit2gtk3

EPSS

Процентиль: 73%
0.00779
Низкий

Дефекты

CWE-20