Unrated severityNVD Advisory· Published Oct 9, 2015· Updated Jun 17, 2026
CVE-2015-5828
CVE-2015-5828
Description
The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection (aka 3xx) status code to a plugin, which allows remote attackers to bypass intended request restrictions via a crafted web site.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <=8.0.8
- (no CPE)range: <9
Patches
Vulnerability mechanics
References
5- lists.apple.com/archives/security-announce/2015/Sep/msg00007.htmlnvdVendor Advisory
- lists.opensuse.org/opensuse-updates/2016-03/msg00054.htmlnvdThird Party Advisory
- www.securityfocus.com/bid/79707nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1033688nvdThird Party AdvisoryVDB Entry
- support.apple.com/HT205265nvdVendor Advisory
News mentions
0No linked articles in our index yet.