Home

CVE-2015-1156

Description

The page-loading implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, does not properly handle the rel attribute in an A element, which allows remote attackers to bypass the Same Origin Policy for a links target, and spoof the user interface, via a crafted web site.

Risk Information

Base Score
8.1
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS Score
Exploitation Probability
0.627

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in Apple Safari 7.0Mac
Multiple Vulnerabilities are affected in Apple Safari 7.0.1Mac
Multiple Vulnerabilities are affected in Apple Safari 7.0.2Mac
Multiple Vulnerabilities are affected in Apple Safari 7.0.3Mac
Multiple Vulnerabilities are affected in Apple Safari 7.0.4Mac
Multiple Vulnerabilities are affected in Apple Safari 7.0.5Mac
Multiple Vulnerabilities are affected in Apple Safari 7.1.2Mac
Multiple Vulnerabilities are affected in Apple Safari 8.0.2Mac
Multiple Vulnerabilities are affected in Apple Safari 7.1.0Mac
Multiple Vulnerabilities are affected in Apple Safari 8.0.0Mac
Multiple Vulnerabilities are affected in Apple Safari 7.0.6Mac
Multiple Vulnerabilities are affected in Apple Safari 7.1.1Mac
Multiple Vulnerabilities are affected in Apple Safari 8.0.1Mac
Multiple Vulnerabilities are affected in Apple Safari 7.1.3Mac
Multiple Vulnerabilities are affected in Apple Safari 8.0.3Mac
Multiple Vulnerabilities are affected in Apple Safari 7.1.4Mac
Multiple Vulnerabilities are affected in Apple Safari 8.0.4Mac
Multiple Vulnerabilities are affected in Apple Safari 6.2.5Mac
Multiple Vulnerabilities are affected in Apple Safari 7.1.5Mac
Multiple Vulnerabilities are affected in Apple Safari 8.0.5Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 7.0Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 7.0.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 7.0.2Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 7.0.3Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 7.0.4Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 7.0.5Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 7.1.2Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 8.0.2Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 7.1.0Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 8.0.0Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 7.0.6Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 7.1.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 8.0.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 7.1.3Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 8.0.3Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 7.1.4Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 8.0.4Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 6.2.5Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 7.1.5Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 8.0.5Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234