Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-8827

The HTTP referrer header may be used to leak browsing history. The issue was resolved by downgrading all third party referrers to their origin. This issue is fixed in Safari 13.0.3

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apple

Description

The HTTP referrer header may be used to leak browsing history. The issue was resolved by downgrading all third party referrers to their origin. This issue is fixed in Safari 13.0.3, iTunes 12.10.2 for Windows, iCloud for Windows 10.9.2, tvOS 13.2, iOS 13.2 and iPadOS 13.2, iCloud for Windows 7.15. Visiting a maliciously crafted website may reveal the sites a user has visited.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apple iOS and iPadOS

  • unspecified to < 13.2affected

Apple tvOS

  • unspecified to < 13.2affected

Apple Safari

  • unspecified to < 13.0affected

Apple iTunes for Windows

  • unspecified to < 12.10affected

Apple iCloud for Windows

  • unspecified to < 7.15affected

Apple iCloud for Windows

  • unspecified to < 10.9affected

References