CVE-2015-1155

WebKit <6.2.6-8.0.6 - SSRF

Title source: llm

Description

The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass the Same Origin Policy and read arbitrary files via a crafted web site.

Exploits (1)

metasploit WORKING POC

by joev · rubypocosx

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/safari_file_url_navigation.rb

View Code ZIP pw:eip

References (9)

[Vendor Advisory] http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html

[Vendor Advisory] http://lists.apple.com/archives/security-announce/2015/May/msg00000.html

[Mailing List] http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html

[Mailing List] http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html

[Vendor Advisory] http://support.apple.com/kb/HT204941

[Vendor Advisory] http://www.ubuntu.com/usn/USN-2937-1

[Vendor Advisory] https://support.apple.com/HT204826

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/74527

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1032270

Scores

EPSS 0.6787

EPSS Percentile 98.6%

Details

CWE

CWE-264

Status published

Products (21)

apple/iphone_os < 8.3

apple/safari 7.0

apple/safari 7.0.1

apple/safari 7.0.2

apple/safari 7.0.3

apple/safari 7.0.4

apple/safari 7.0.5

apple/safari 7.0.6

apple/safari 7.1.0

apple/safari 7.1.1

... and 11 more

Published May 08, 2015

Tracked Since Feb 18, 2026