WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, which allows remote attackers to determine the existence of arbitrary files via a crafted HTML document.
{ "urgency": "medium" }
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2009-1703.json"