prototype Archives - CVE Vulnerability

CVE-2008-7220

Sun, 26 Feb 2023 09:11:55 +0000

Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make “cross-site ajax requests” via unknown vectors.

The post CVE-2008-7220 appeared first on CVE Vulnerability.

CVE-2020-7993

Sun, 26 Feb 2023 06:43:14 +0000

Prototype 1.6.0.1 allows remote authenticated users to forge ticket creation (on behalf of other user accounts) via a modified email ID field.

The post CVE-2020-7993 appeared first on CVE Vulnerability.

CVE-2020-27511

Sun, 26 Feb 2023 06:40:21 +0000

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service (ReDOS) through stripping crafted HTML tags.

The post CVE-2020-27511 appeared first on CVE Vulnerability.