Unscored CVE-2012-0590 EUVD-2012-0622GHSA-9f42-xxqj-jw23

Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5.1, allows user-assisted remote attackers to inject arbitr…

Published Mar 8, 2012 · Updated Aug 6, 2024 · Assigned by apple

Description

Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5.1, allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a drag-and-drop operation.

References

79975 vdb-entry
1026774 vdb-entry
48377 third-party-advisory
APPLE-SA-2012-03-12-1 vendor-advisory
48288 third-party-advisory
APPLE-SA-2012-03-07-2 vendor-advisory