{"vulnerability": "CVE-2015-1155", "sightings": [{"uuid": "57cf01c3-6632-41b1-b113-ddab56083072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-1155", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "6ce1eecb-4ff2-415f-afbb-97d79032b85f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-1155", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:36.000000Z"}, {"uuid": "99fa15d2-0cce-458e-8777-28ad95c6cf3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-1155", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/safari_file_url_navigation.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "701dd550-48d1-4e62-b1c7-9b979aea34ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-1155", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/safari_file_url_navigation.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"joev \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"Versions of Safari before 8.0.6, 7.1.6, and 6.2.6 are vulnerable to a\\n          \\\"state management issue\\\" that allows a browser window to be navigated\\n          to a file:// URL. By dropping and loading a malicious .webarchive file,\\n          an attacker can read arbitrary files, inject cross-domain Javascript, and\\n          silently install Safari extensions.\", \"disclosure_date\": \"2014-01-16\", \"fullname\": \"auxiliary/gather/safari_file_url_navigation\", \"is_install_path\": true, \"mod_time\": \"2026-03-12 14:18:57 +0000\", \"name\": \"Mac OS X Safari file:// Redirection Sandbox Escape\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/gather/safari_file_url_navigation.rb\", \"platform\": \"OSX\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/safari_file_url_navigation\", \"references\": [\"ZDI-15-228\", \"CVE-2015-1155\", \"URL-https://support.apple.com/en-us/HT204826\"], \"rport\": null, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:21.503092Z"}]}