Vulnetix
Try Vulnetix Request Demo
CVE-2007-2379 PUBLISHED CVSS 5 MEDIUM

The jQuery framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking."

EPSS 0.59% · 69.1th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
0.59%
69.1th percentile

Affected Products

VendorProductVersions
jqueryjquery
netappsnapcenter
n/an/an/a

Timeline

References

Open in Interactive Console →