Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apple WebKit WebCore XMLHttpRequest实施loader/DocumentThreadableLoader.cpp信任管理漏洞
Vulnerability Description
WebKit是KDE、苹果（Apple）、谷歌（Google）等公司共同开发的一套开源Web浏览器引擎，目前被Apple Safari及Google Chrome等浏览器使用。 WebKit r58409之前版本的WebCore中的XMLHttpRequest实施中的loader/DocumentThreadableLoader.cpp没有正确处理跨来源同步请求时的认证，此漏洞可引起未明影响和远程攻击向量。
CVSS Information
N/A
Vulnerability Type
N/A