VulnerabilityModified
CVE-2008-3171
Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
MEDIUM 5.0EPSS 1.18%
Does this matter?
Lower severity and a low EPSS score (1.18%). Track it; it rarely justifies an emergency change on its own.
Description
Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.18% probability · 66th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- apple/safari
- Source
- cve@mitre.org
References
- http://kuza55.blogspot.com/2008/07/some-random-safari-notes.html
- http://www.securityfocus.com/bid/30193
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43837
- http://kuza55.blogspot.com/2008/07/some-random-safari-notes.html
- http://www.securityfocus.com/bid/30193
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43837
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.