NA
CVSSv3

CVE-2010-1760

CVSSv4: NA | CVSSv3: NA | CVSSv2: 10 | VMScore: 1000 | EPSS: 0.01634 | KEV: Not Included
Published: 19/08/2010 Updated: 21/11/2024

Vulnerability Summary

loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.

Vulnerable Product Search on Vulmon Subscribe to Product

apple webkit

apple webkit r50173

apple webkit r56187

apple webkit r56188

apple webkit r56379