CVE-2007-2376 - CVE House
Back to Database
Status published Medium CVE-2007-2376

The Dojo framework exchanges data using JavaScript Object Notation (JSON)...

Vulnerability Description

The Dojo framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking."

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-2376

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

dojo toolkit

View all reports →

Affected Software

dojo toolkit
Vulnerable Versions:
Unknown

Timeline

Official Publish: April 30th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.