Lucene search
AppleCVELIST:CVE-2015-3658HistoryJul 03, 2015 - 1:00 a.m.
CVE-2015-3658
2015-07-0301:00:00
apple
www.cve.org
6
The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for remote attackers to bypass CSRF protection mechanisms via a crafted web site.
References
lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
lists.apple.com/archives/security-announce/2015/Jun/msg00004.html
lists.opensuse.org/opensuse-updates/2016-03/msg00132.html
support.apple.com/kb/HT204941
support.apple.com/kb/HT204950
www.securityfocus.com/bid/75492
www.securitytracker.com/id/1032754
www.ubuntu.com/usn/USN-2937-1
Related
prion
prion
Cross site request forgery (csrf)
2015-07-03 01:59:00
ubuntucve
ubuntucve
CVE-2015-3658
2015-07-02 00:00:00
cve
cve
CVE-2015-3658
2015-07-03 01:59:17
nvd
nvd
CVE-2015-3658
2015-07-03 01:59:17
nessus
nessus
Mac OS X : Apple Safari < 6.2.7 / 7.1.7 / 8.0.7 Multiple Vulnerabilities
2015-07-01 00:00:00
Safari < 6.2.7 / 7.1.7 / 8.0.7 Multiple Vulnerabilities
2015-10-01 00:00:00
Fedora 23 : webkitgtk3-2.4.10-1.fc23 (2016-1a7f7ffb58)
2016-03-21 00:00:00
openvas
openvas
Apple Safari Multiple Vulnerabilities-01 (Jul 2015) - Mac OS X
2015-07-08 00:00:00
Fedora Update for webkitgtk3 FEDORA-2016-1
2016-03-21 00:00:00
Fedora Update for webkitgtk FEDORA-2016-9
2016-04-11 00:00:00
securityvulns
securityvulns
APPLE-SA-2015-06-30-4 Safari 8.0.7, Safari 7.1.7, and Safari 6.2.7
2015-07-05 00:00:00
Apple Safari / Webkit multiple security vulnerabilities
2015-07-05 00:00:00
Apple iOS multiple security vulnerabilities
2015-07-05 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: webkitgtk-2.4.10-1.fc22
2016-03-29 19:23:05
[SECURITY] Fedora 23 Update: webkitgtk-2.4.10-1.fc23
2016-03-22 19:55:11
[SECURITY] Fedora 24 Update: webkitgtk-2.4.10-1.fc24
2016-03-27 00:38:11
mageia
mageia
Updated webkit packages fix security vulnerability
2016-03-25 09:38:37
Updated webkit2 packages fix security vulnerability
2016-03-25 09:38:37
ubuntu
ubuntu
WebKitGTK+ vulnerabilities
2016-03-21 00:00:00
osv
osv
libjavascriptcoregtk-1_0-0-2.4.11-3.3 on GA media
2024-06-15 00:00:00