| Package | Affected versions | Patched versions |
|---|---|---|
| webkit | = r50173= r56187= r56188= r56379≤ r58408 |
loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free