CVE-2007-2379
jQuery - Exposure of Sensitive Information via JSON Data Hijacking
Title source: llmDescription
The jQuery framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking."
References (3)
Core 3
Core References
Third Party Advisory, URL Repurposed x_refsource_misc
http://www.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf
Broken Link vdb-entry
x_refsource_osvdb
http://osvdb.org/43320
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20190416-0007/
Scores
EPSS
0.0277
EPSS Percentile
84.6%
Details
CWE
CWE-200
Status
published
Products (2)
jquery/jquery
netapp/snapcenter
Published
Apr 30, 2007
Tracked Since
Feb 18, 2026