CVE-2008-6059

CVE-2008-6059 describes an information disclosure vulnerability in WebKit's WebCore component, specifically in xml/XMLHttpRequest.cpp, affecting versions prior to r38566. This flaw allows remote attackers to bypass HTTPOnly protection and access Set-Cookie and Set-Cookie2 HTTP response headers via XMLHttpRequest calls, potentially exposing sensitive cookie information. With a CVSS score of 5.0 (medium severity), it has a low attack complexity and requires no authentication, but only impacts confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.