Description
The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page.
References
- 43068 third-party-advisory
- ADV-2009-3233 vdb-entry
- APPLE-SA-2009-11-11-1 vendor-advisory
- ADV-2009-3217 vdb-entry
- ADV-2011-0212 vdb-entry
- http://support.apple.com/kb/HT4225
- FEDORA-2009-11487 vendor-advisory
- 59967 vdb-entry
- 36997 vdb-entry
- http://support.apple.com/kb/HT3949
- 1023165 vdb-entry
- oval:org.mitre.oval:def:6516 vdb-entry signature
- SUSE-SR:2011:002 vendor-advisory
- safari-crossorigin-csrf(54239) vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=525789
- FEDORA-2009-11491 vendor-advisory
- 37358 third-party-advisory
- 59940 vdb-entry
- 37397 third-party-advisory
- 37393 third-party-advisory
- APPLE-SA-2010-06-21-1 vendor-advisory
- 37346 third-party-advisory