VDB
GHSA-qf29-g3vw-qh22
GHSA-qf29-g3vw-qh22
PUBLISHED
Record from GitHub Advisory Database · Published May 1, 2022
WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password.
Timeline
- May 1, 2022 CVE Published
- Apr 30, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-qf29-g3vw-qh22
vulnetix vdb fixes GHSA-qf29-g3vw-qh22Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-qf29-g3vw-qh22/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html url
- http://secunia.com/advisories/29393 url
- http://www.securityfocus.com/bid/28290 url
- http://www.vupen.com/english/advisories/2008/0920/references url
- https://nvd.nist.gov/vuln/detail/CVE-2008-1005 advisory
- http://docs.info.apple.com/article.html?artnum=307563 url
- http://www.securityfocus.com/bid/28326 url
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41329 url
- http://www.securitytracker.com/id?1019656 url
- http://www.us-cert.gov/cas/techalerts/TA08-079A.html url