Lucene search

K
nvd[email protected]NVD:CVE-2010-1126
HistoryMar 26, 2010 - 8:30 p.m.

CVE-2010-1126

2010-03-2620:30:00
CWE-200
web.nvd.nist.gov
4

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

8.5

Confidence

High

EPSS

0.004

Percentile

74.0%

The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.

Affected configurations

Nvd
Node
applewebkit

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

8.5

Confidence

High

EPSS

0.004

Percentile

74.0%