CVE-2004-0743

Safari in Mac OS X before 10.3.5, after sending form data using the POST method, may re-send the data to a GET method URL if that URL is redirected after the POST data and the user uses the forward or backward buttons, which may cause an information leak.

Affected Software

Name	Vendor	Start Version	End Version
Mac_os_x	Apple	10.2 (including)	10.2 (including)
Mac_os_x	Apple	10.2.1 (including)	10.2.1 (including)
Mac_os_x	Apple	10.2.2 (including)	10.2.2 (including)
Mac_os_x	Apple	10.2.3 (including)	10.2.3 (including)
Mac_os_x	Apple	10.2.4 (including)	10.2.4 (including)
Mac_os_x	Apple	10.2.5 (including)	10.2.5 (including)
Mac_os_x	Apple	10.2.6 (including)	10.2.6 (including)
Mac_os_x	Apple	10.2.7 (including)	10.2.7 (including)
Mac_os_x	Apple	10.2.8 (including)	10.2.8 (including)
Mac_os_x	Apple	10.3 (including)	10.3 (including)
Mac_os_x	Apple	10.3.1 (including)	10.3.1 (including)
Mac_os_x	Apple	10.3.2 (including)	10.3.2 (including)
Mac_os_x	Apple	10.3.3 (including)	10.3.3 (including)
Mac_os_x	Apple	10.3.4 (including)	10.3.4 (including)
Mac_os_x_server	Apple	10.2 (including)	10.2 (including)
Mac_os_x_server	Apple	10.2.1 (including)	10.2.1 (including)
Mac_os_x_server	Apple	10.2.2 (including)	10.2.2 (including)
Mac_os_x_server	Apple	10.2.3 (including)	10.2.3 (including)
Mac_os_x_server	Apple	10.2.4 (including)	10.2.4 (including)
Mac_os_x_server	Apple	10.2.5 (including)	10.2.5 (including)
Mac_os_x_server	Apple	10.2.6 (including)	10.2.6 (including)
Mac_os_x_server	Apple	10.2.7 (including)	10.2.7 (including)
Mac_os_x_server	Apple	10.2.8 (including)	10.2.8 (including)
Mac_os_x_server	Apple	10.3 (including)	10.3 (including)
Mac_os_x_server	Apple	10.3.1 (including)	10.3.1 (including)
Mac_os_x_server	Apple	10.3.2 (including)	10.3.2 (including)
Mac_os_x_server	Apple	10.3.3 (including)	10.3.3 (including)
Mac_os_x_server	Apple	10.3.4 (including)	10.3.4 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2004-0743
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References