CVE-2013-1013

Опубликовано: 05 июн. 2013

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

XSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows remote attackers to trigger unintended form submissions via unspecified vectors.

Ссылки

http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html
Vendor Advisory
http://support.apple.com/kb/HT5785
Vendor Advisory
http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html
Vendor Advisory
http://support.apple.com/kb/HT5785
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 6.0.4 (включая)

cpe:2.3:a:apple:safari:6.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:6.0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.01392

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2013-1013

ubuntu

около 13 лет назад

XSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows remote attackers to trigger unintended form submissions via unspecified vectors.

GHSA-v2j2-j5rx-h5mx

github

больше 4 лет назад

XSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows remote attackers to trigger unintended form submissions via unspecified vectors.

EPSS

Процентиль: 70%

0.01392

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-20