Total vulnerabilities in the database
loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.
| Software | From | Fixed in |
|---|---|---|
| apple / webkit | r56188 | r56188.x |
| apple / webkit | - | r58408.x |
| apple / webkit | r50173 | r50173.x |
| apple / webkit | r56379 | r56379.x |
| apple / webkit | r56187 | r56187.x |