CVE-2015-5828
The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection (aka 3xx) status code to a plugin, which allows remote att…
Published: 2015-10-09 · CVSS: Unscored
The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection (aka 3xx) status code to a plugin, which allows remote attackers to bypass intended request restrictions via a crafted web site.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7