CVE-2013-1013

Опубликовано: 05 июн. 2013

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

XSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows remote attackers to trigger unintended form submissions via unspecified vectors.

Ссылки

http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html
Vendor Advisory
http://support.apple.com/kb/HT5785
Vendor Advisory
http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html
Vendor Advisory
http://support.apple.com/kb/HT5785
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 6.0.4 (включая)

cpe:2.3:a:apple:safari:6.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:6.0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.003

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2013-1013

ubuntu

больше 12 лет назад

XSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows remote attackers to trigger unintended form submissions via unspecified vectors.

GHSA-v2j2-j5rx-h5mx

github

больше 3 лет назад

XSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows remote attackers to trigger unintended form submissions via unspecified vectors.

EPSS

Процентиль: 53%

0.003

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-20