CVE-2021-47157

Summary

The Kossy module before 0.60 for Perl allows JSON hijacking because of X-Requested-With mishandling.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/kazeburo/Kossy/pull/16
• https://metacpan.org/dist/Kossy/changes

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://github.com/kazeburo/Kossy/pull/16
• https://metacpan.org/dist/Kossy/changes

• ←Previous
• Next→