CVE-2007-2383
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2007-2383
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2007-2383.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2007-2383
- Downstream
- Published
- 2007-04-30T23:19:00Z
- Modified
- 2025-08-09T20:01:26Z
- Summary
- [none]
- Details
-
The Prototype (prototypejs) framework before 1.5.1 RC3 exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking."
- References