CVE-2008-1999

MEDIUM · CVSS 5 EPSS 1.41%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-04-28 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2008-1999

Severity

MEDIUM

CVSS

EPSS

1.41%

Original Filing — NVD Description

Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many "invisible" characters in the userinfo subcomponent of the authority component of the URL (aka the user field), as demonstrated by %E3%80%80 sequences.