CVE-2013-5227

{"id": "CVE-2013-5227", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-12-18T16:04:33.460", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2013-12/0086.html", "source": "product-security@apple.com"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2013-12/0087.html", "source": "product-security@apple.com"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html", "source": "product-security@apple.com"}, {"url": "http://support.apple.com/kb/HT6162", "source": "product-security@apple.com"}, {"url": "http://support.apple.com/kb/HT6441", "source": "product-security@apple.com"}, {"url": "http://www.securityfocus.com/bid/64355", "source": "product-security@apple.com"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2013-12/0086.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2013-12/0087.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://support.apple.com/kb/HT6162", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://support.apple.com/kb/HT6441", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/64355", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Apple Safari before 6.1.1 and 7.x before 7.0.1 allows remote attackers to bypass the Same Origin Policy and discover credentials by triggering autofill of subframe form fields."}, {"lang": "es", "value": "Apple safari anteriores a 6.1.1 y 7.x anteriores a 7.0.1 permite a atacantes remotos sortear Same Origin Policy y descubrir credenciales disparando autocompletar en campos de formulario subframe."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1CD7CFFE-1DE7-4FE4-ACD3-F9B6C3974373", "versionEndIncluding": "6.1"}, {"criteria": "cpe:2.3:a:apple:safari:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9BA4B009-6BF2-4174-A05C-77B75C45377C"}, {"criteria": "cpe:2.3:a:apple:safari:6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "136A760D-2873-4216-AB60-E3D93DE82BCF"}, {"criteria": "cpe:2.3:a:apple:safari:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFF3DFE0-2587-4E91-ACC2-45E9B51EF4C4"}, {"criteria": "cpe:2.3:a:apple:safari:6.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "076B9C00-EFB0-4284-A617-FAEE341F80FB"}, {"criteria": "cpe:2.3:a:apple:safari:6.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8851ED07-715F-4F6A-AE29-FA95D069F972"}, {"criteria": "cpe:2.3:a:apple:safari:6.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65EBA204-5E12-429A-9414-400CBAA0BA89"}, {"criteria": "cpe:2.3:a:apple:safari:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88D46FE5-10D2-44A0-ACAE-CEED8BD0C30C"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}