Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apple Safari 跨站请求伪造漏洞
Vulnerability Description
Apple Safari是美国苹果（Apple）公司的一款Web浏览器，是Mac OS X和iOS操作系统附带的默认浏览器。 在Apple Safari 4.0.4之前版本和Google Chrome 3.0.195.33之前版本中使用的WebKit的跨源资源共享（CORS）实现在OPTIONS请求中包含了某些custom HTTP页眉。远程攻击者可借助特制的web页执行跨站请求伪造攻击。
CVSS Information
N/A
Vulnerability Type
N/A