CVE-2015-1091
The CFNetwork Session component in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly handle request headers during processing of redirects in HTTP responses, …
Published: 2015-04-10 · CVSS: Unscored
The CFNetwork Session component in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly handle request headers during processing of redirects in HTTP responses, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7