CVE-2007-2383

CVE-2007-2383 affects the Prototype.js framework prior to 1.5.1 RC3, which exposes JSON data via a SCRIPT SRC URL and allows data exfiltration via JavaScript Hijacking. Public connected documents confirm the vulnerability vector and mention the affected library version. The provided sources do no...