CSRF in Apple Iphone OS

CVE-2009-2816

The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.016 (72.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
  • cve@mitre.org (vendor-advisory, x_refsource_APPLE, Patch, Mailing List, Vendor Advisory)
  • cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
  • cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
  • cve@mitre.org (vendor-advisory, x_refsource_FEDORA, Third Party Advisory)
  • cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)