JavaScript Hijacking Vulnerability in Google Web Toolkit Framework
CVE-2007-2378

Currently unrated

Key Information:

Vendor
Google
Status
Web Toolkit
Vendor
CVE Published:
30 April 2007

Summary

The Google Web Toolkit (GWT) framework has a vulnerability that enables remote attackers to exploit the inadequate protection in the data exchange mechanism which utilizes JavaScript Object Notation (JSON). This flaw allows attackers to retrieve sensitive data by crafting a web page that utilizes the SRC attribute of a SCRIPT element to fetch data from the GWT application. The attackers can then capture this data using malicious JavaScript, leading to unauthorized access to information. Organizations using GWT should implement security measures to mitigate risks associated with this vulnerability.

References

http://www.fortifysoftware.com/servlet/downloads/public/J...
x_refsource_MISC
http://osvdb.org/43321
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.