Lucene search

K
cvelistMitreCVELIST:CVE-2006-6238
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2006-6238

2022-10-0316:21:22
mitre
www.cve.org
8
apple safari
autofill
vulnerability
sensitive information
remote attackers

AI Score

5.7

Confidence

Low

EPSS

0.134

Percentile

95.6%

The AutoFill feature in Apple Safari 2.0.4 does not properly verify that all automatically populated form fields are visible to the user, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via input fields of zero width, a variant of CVE-2006-6077.