Unscored CVE-2013-1013 EUVD-2013-1053GHSA-v2j2-j5rx-h5mx

XSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows remote attackers to trigger unintended form…

Published Jun 5, 2013 · Updated Sep 17, 2024 · Assigned by apple

Package: qtwebkit-opensource-src Package: qtwebkit-source Ecosystem: Ubuntu

Description

XSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows remote attackers to trigger unintended form submissions via unspecified vectors.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 16.04 LTS	qtwebkit-source +1	No fix yet	—

References

http://support.apple.com/kb/HT5785
APPLE-SA-2013-06-04-2 vendor-advisory