Unscored CVE-2013-5227 EUVD-2013-5067GHSA-3qmh-69j2-8hj7

Apple Safari before 6.1.1 and 7.x before 7.0.1 allows remote attackers to bypass the Same Origin Policy and discover credentials by trigger…

Published Dec 18, 2013 · Updated Aug 6, 2024 · Assigned by apple

Description

Apple Safari before 6.1.1 and 7.x before 7.0.1 allows remote attackers to bypass the Same Origin Policy and discover credentials by triggering autofill of subframe form fields.

References

APPLE-SA-2013-12-16-1 vendor-advisory
64355 vdb-entry
http://support.apple.com/kb/HT6441
APPLE-SA-2014-09-17-1 vendor-advisory
http://support.apple.com/kb/HT6162
APPLE-SA-2013-12-16-2 vendor-advisory