CVE-2011-3426

Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary web script or HTML via a file…

published October 14, 2011

CVSS
—
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary web script or HTML via a file accompanied by a "Content-Disposition: attachment" HTTP header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01821 · 78.5th percentile
Published
2011-10-14T10:00Z
EPSS history
Timeline
  • 14 OCT 10:00Z
    Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary web script or HTML via a file…
    cvelistv5