CVE-2019-8827

The HTTP referrer header may be used to leak browsing history

published October 27, 2020

CVSS
—
EPSS
1%
Percentile
64.0
In the wild
Unconfirmed
What it is

The HTTP referrer header may be used to leak browsing history. The issue was resolved by downgrading all third party referrers to their origin. This issue is fixed in Safari 13.0.3, iTunes 12.10.2 for Windows, iCloud for Windows 10.9.2, tvOS 13.2, iOS 13.2 and iPadOS 13.2, iCloud for Windows 7.15. Visiting a maliciously crafted website may reveal the sites a user has visited.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01052 · 64.0th percentile
Published
2020-10-27T19:53Z
EPSS history
Timeline
  • 27 OCT 19:53Z
    The HTTP referrer header may be used to leak browsing history
    cvelistv5