CVE-2011-0169

Published Mar 11, 2011 CVSS 2.0 · 2.6 Low EPSS 1.5% KEV · Not listed
Description
WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted web site.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2011-0195 WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted web site.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 6, 2024, 9:43 PM
Reserved
Dec 23, 2010, 12:00 AM
Status
Modified
Published
Mar 11, 2011, 10:55 PM
Modified
Jun 16, 2026, 11:26 PM