Sunday, April 29, 2012

Apple Bug #1: Cross-Site Scripting (XSS) Found in

Sow Ching Shiong, an independent vulnerability researcher has discovered a Cross-Site Scripting (XSS) vulnerability in, which can be exploited by an attacker to conduct XSS attacks.

Proof of concept<script>alert(document.cookie)</script>

This vulnerability has been confirmed and patched by Apple Security Team. I would like to thank them for their quick response to my report.

Apple White Hat

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.