Lucene search

K
cve[email protected]CVE-2010-0314
HistoryJan 14, 2010 - 7:30 p.m.

CVE-2010-0314

2010-01-1419:30:00
NVD-CWE-Other
web.nvd.nist.gov
26
apple safari
remote attackers
redirect
target url
href attribute
stylesheet
link element
document.stylesheets
cve-2010-0314
nvd

6.2 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.02 Low

EPSS

Percentile

88.8%

Apple Safari allows remote attackers to discover a redirectโ€™s target URL, for the session of a specific user of a web site, by placing the siteโ€™s URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value.

CPENameOperatorVersion
apple:safariapple safarieq*

6.2 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.02 Low

EPSS

Percentile

88.8%