VULNERABILITY INTELLIGENCE
CVE-2008-7220
CVSS score7.5 HIGH
EPSS probability13.36%
CISA KEVNot currently listed
Published2009-09-13
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors.
Primary references
- cve@mitre.org — Release Notes, Third Party Advisory
- cve@mitre.org — Broken Link
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
- cve@mitre.org — Issue Tracking, Not Applicable, Third Party Advisory