Unrated severityNVD Advisory· Published Oct 9, 2015· Updated May 6, 2026
CVE-2015-5828
CVE-2015-5828
Description
The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection (aka 3xx) status code to a plugin, which allows remote attackers to bypass intended request restrictions via a crafted web site.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- lists.apple.com/archives/security-announce/2015/Sep/msg00007.htmlnvdVendor Advisory
- lists.opensuse.org/opensuse-updates/2016-03/msg00054.htmlnvdThird Party Advisory
- www.securityfocus.com/bid/79707nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1033688nvdThird Party AdvisoryVDB Entry
- support.apple.com/HT205265nvdVendor Advisory
News mentions
0No linked articles in our index yet.