AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2007-2377

MEDIUM · CVSS 5 EPSS 1.88%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-04-30 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2007-2377
Severity
MEDIUM
CVSS
5
EPSS
1.88%
Exchange Java

Original NVD Description

The Getahead Direct Web Remoting (DWR) framework 1.1.4 exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking."