CVE-2009-1714
published 2009-06-10CVE-2009-1714: Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web…
PriorityP417medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
2.66%
84.2th percentile
Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to the improper escaping of HTML attributes.
Affected
26 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | safari | <= 4.0_beta | — |
| apple | safari | <= 3.2.3 | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-f5x5-xfvq-w875: Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4
ghsa_unreviewed·2022-05-02
CVE-2009-1714 [MEDIUM] CWE-79 GHSA-f5x5-xfvq-w875: Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4
Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to the improper escaping of HTML attributes.
OSV
CVE-2009-1714: Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4
osv·2009-06-10·CVSS 4.3
CVE-2009-1714 [MEDIUM] CVE-2009-1714: Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4
Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to the improper escaping of HTML attributes.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlhttp://osvdb.org/55023http://secunia.com/advisories/35379http://secunia.com/advisories/37746http://secunia.com/advisories/43068http://securitytracker.com/id?1022344http://support.apple.com/kb/HT3613http://www.debian.org/security/2009/dsa-1950http://www.securityfocus.com/bid/35260http://www.securityfocus.com/bid/35348http://www.vupen.com/english/advisories/2009/1522http://www.vupen.com/english/advisories/2011/0212https://exchange.xforce.ibmcloud.com/vulnerabilities/51268http://lists.apple.com/archives/security-announce/2009/jun/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlhttp://osvdb.org/55023http://secunia.com/advisories/35379http://secunia.com/advisories/37746http://secunia.com/advisories/43068http://securitytracker.com/id?1022344http://support.apple.com/kb/HT3613http://www.debian.org/security/2009/dsa-1950http://www.securityfocus.com/bid/35260http://www.securityfocus.com/bid/35348http://www.vupen.com/english/advisories/2009/1522http://www.vupen.com/english/advisories/2011/0212https://exchange.xforce.ibmcloud.com/vulnerabilities/51268
2009-06-10
Published