Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CRLF injection vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject HTTP headers and bypass the Same Origin Policy via a crafted HTML document, related to cross-site scripting (XSS) attacks that depend on communication with arbitrary web sites on the same server through use of XMLHttpRequest without a Host header.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apple Safari WebKit "Same Origin Policy" 安全绕过和CRLF注入漏洞
Vulnerability Description
Safari是苹果家族机器操作系统中默认捆绑的WEB浏览器 。 Apple Safari "WebKit"在处理WebKit的XMLHttpRequest头时存在CRLF注入漏洞，可能允许恶意网站通过发布缺少Host头的XMLHttpRequest绕过同源策略。缺少Host头的XMLHttpRequest可能到达同一服务 器上的其他网站，允许攻击者所提供的JavaScript与这些网站交互 。
CVSS Information
N/A
Vulnerability Type
N/A