CVE-2007-2379
EPSS 1.4%發布日:2007/4/30修改日:2024/6/4
描述
The jQuery framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking."
受影響套件(1)
- Debian/jqueryfrom 0