Information Exposure

Affecting jquery package, versions *

Report new vulnerabilities
Do your applications use this vulnerable package? Test your applications

Overview

The jQuery framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking."

References

CVSS Score

5.3
low severity
  • Attack Vector
    Network
  • Attack Complexity
    Low
  • Privileges Required
    None
  • User Interaction
    None
  • Scope
    Unchanged
  • Confidentiality
    Low
  • Integrity
    None
  • Availability
    None
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVE
CVE-2007-2379
CWE
CWE-200
Snyk ID
SNYK-DEBIAN10-JQUERY-290121
Disclosed
30 Apr, 2007
Published
30 Apr, 2007