CVE-2010-1760: Critical severity webkit vulnerability
loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1760?
CVE-2010-1760 has an unspecified impact and remote attack vectors, which suggests a moderate to high severity depending on the context of use.
How do I fix CVE-2010-1760?
To fix CVE-2010-1760, update Apple WebKit to version r58409 or later.
What software is affected by CVE-2010-1760?
CVE-2010-1760 affects various versions of Apple WebKit prior to r58409.
What vulnerabilities are associated with CVE-2010-1760?
CVE-2010-1760 may allow for improper handling of credentials during cross-origin synchronous requests.
Is there a workaround for CVE-2010-1760?
There is no official workaround for CVE-2010-1760; the best mitigation is to upgrade to the latest version of WebKit.