NetSight
IP …
medium6.4

CVE-2013-5227

Apple Safari before 6.1.1 and 7.x before 7.0.1 allows remote attackers to bypass the Same Origin Policy and discover credentials by triggering autofill of subf…

Impact

Apple Safari before 6.1.1 and 7.x before 7.0.1 allows remote attackers to bypass the Same Origin Policy and discover credentials by triggering autofill of subframe form fields.

Affected products

VendorProductAffected versions
AppleSafari
through 6.1
Versions 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4

Weakness classification

CWE-264

References