Lucene search

K
cveMitreCVE-2010-1126
HistoryMar 26, 2010 - 8:30 p.m.

CVE-2010-1126

2010-03-2620:30:00
CWE-200
mitre
web.nvd.nist.gov
31
javascript
webkit
remote attackers
selected keystrokes
form field
nvd
cve-2010-1126

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

8.4

Confidence

High

EPSS

0.004

Percentile

74.0%

The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.

Affected configurations

Nvd
Node
applewebkit
VendorProductVersionCPE
applewebkit*cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

8.4

Confidence

High

EPSS

0.004

Percentile

74.0%