CVE-2008-3171: Apple Safari

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.

Affected products

• Apple Safari: any version

Published 2008-07-14. Last modified 2026-06-16.