CVE-2008-7220
HIGH 7.5EPSS 13.4%
Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors.
- CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 13.36% chance of exploitation in the next 30 days, 96th percentile
- Published
- 2009-09-13
- Updated
- 2024-08-07
Proof-of-concept exploits (1)
- followboy1999/CVE-2008-72201★ · 2016-10-28
Security advisories
- http://github.com/sstephenson/prototype/blob/master/CHANGELOG
- http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html
- http://seclists.org/fulldisclosure/2019/May/10
- http://seclists.org/fulldisclosure/2019/May/11
- http://seclists.org/fulldisclosure/2019/May/13
- http://secunia.com/advisories/37479
- http://secunia.com/advisories/37677
- http://www.debian.org/security/2009/dsa-1952
- http://www.openwall.com/lists/oss-security/2009/11/07/2
- https://bugzilla.redhat.com/show_bug.cgi?id=523277
- https://bugzilla.redhat.com/show_bug.cgi?id=533137
- https://seclists.org/bugtraq/2019/May/18