CVE-2007-2383 - CVE House
Back to Database
Status published Medium CVE-2007-2383

The Prototype (prototypejs) framework before 1.5.1 RC3 exchanges data using...

Vulnerability Description

The Prototype (prototypejs) framework before 1.5.1 RC3 exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking."

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-2383

Credits & Attribution

No credits recorded in the NVD database.

References

More from prototypejs

View All →
CVE-2020-7993
Prototype 1.6.0.1 allows remote authenticated users to forge ticket creation...
Medium 4.3
CVE-2020-27511
An issue was discovered in the stripTags and unescapeHTML components...
High 7.5
CVE-2008-7220
Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows...
High 7.5

Affected Vendor

prototypejs

View all reports →

Affected Software

prototype framework
Vulnerable Versions:
1.5.1_rc3

Timeline

Official Publish: April 30th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.