Lucene search

K
nvd[email protected]NVD:CVE-2010-1126
HistoryMar 26, 2010 - 8:30 p.m.

CVE-2010-1126

2010-03-2620:30:00
CWE-200
web.nvd.nist.gov

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

8.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.1%

The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.

Affected configurations

NVD
Node
applewebkit

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

8.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.1%