CVE-2007-2378

Currently unrated

Key Information:

Vendor
Google
Status
Web Toolkit
Vendor
CVE Published:
30 April 2007

Summary

The Google Web Toolkit (GWT) framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking."

References

http://www.fortifysoftware.com/servlet/downloads/public/J...
x_refsource_MISC
http://osvdb.org/43321
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.