CVE-2008-1025

No fix known EPSS 3%

Cross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a colon in the hostname portion.

Published 2008-04-17 · CVE record · OSV

Products: apple safari, apple webkit