VULNERABILITY INTELLIGENCE

CVE-2013-5227

CVSS score6.4 MEDIUM
EPSS probability2.26%
CISA KEVNot currently listed
Published2013-12-18
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N

Description

Apple Safari before 6.1.1 and 7.x before 7.0.1 allows remote attackers to bypass the Same Origin Policy and discover credentials by triggering autofill of subframe form fields.

Primary references