Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted web site.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apple Safari WebKit同源策略绕过和跨站脚本攻击漏洞
Vulnerability Description
Apple Apple Safari是美国苹果（Apple）公司开发的一款Web浏览器，是Mac OS X和iOS操作系统附带的默认浏览器。 当使用Web Inspector时，Apple Safari 5.0.4之前版本中的WebKit没有正确处理window.console._inspectorCommandLineAPI属性。用户协助的远程攻击者可以借助特制web站点，绕过同源策略并进行跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A