VULNERABILITY INTELLIGENCE
CVE-2012-0676
CVSS score5 MEDIUM
EPSS probability2.06%
CISA KEVNot currently listed
Published2012-05-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
WebKit in Apple Safari before 5.1.7 does not properly track state information during the processing of form input, which allows remote attackers to fill in form fields on the pages of arbitrary web sites via unspecified vectors.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- product-security@apple.com — Vendor Advisory
- product-security@apple.com
- product-security@apple.com
- product-security@apple.com — Vendor Advisory
- product-security@apple.com
- product-security@apple.com
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108