CVE catalog

CVE-2008-7220

jscropperui: CVE-2008-7220

Severity: Medium
Published: Sep 13, 2009, 10:30:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 13.36% · Oct 22, 2026

Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	zabbix	sid	`1:7.0.29+dfsg-2`	not affected
Debian	zabbix	forky	`1:7.0.29+dfsg-2`	not affected
Debian	zabbix	trixie	`1:7.0.22+dfsg-1~deb13u1`	not affected
Debian	zabbix	bookworm	`1:6.0.14+dfsg-1`	not affected
Debian	symfony	sid	`7.4.21+dfsg-1`	fixed
Debian	symfony	forky	`7.4.21+dfsg-1`	fixed
Debian	symfony	trixie	`6.4.41+dfsg-0+deb13u1`	fixed
Debian	symfony	trixie-security	`6.4.41+dfsg-0+deb13u1`	fixed
Debian	symfony	bookworm	`5.4.53+dfsg-0+deb12u1`	fixed
Debian	symfony	bookworm-security	`5.4.53+dfsg-0+deb12u1`	fixed
Debian	passenger	sid	`6.2.0+ds-1`	not affected
Debian	passenger	forky	`6.2.0+ds-1`	not affected
Debian	passenger	trixie	`6.0.26+ds-1.1`	not affected
Debian	passenger	bookworm	`6.0.17+ds-1`	not affected
Debian	wordpress	sid	`7.1.3+dfsg1-1`	fixed
Debian	wordpress	forky	`7.1.3+dfsg1-1`	fixed
Debian	wordpress	trixie	`6.8.7+dfsg1-0+deb13u1`	fixed
Debian	wordpress	trixie-security	`6.8.10+dfsg1-0+deb13u1`	fixed
Debian	wordpress	bookworm	`6.1.9+dfsg1-0+deb12u1`	fixed
Debian	wordpress	bookworm-security	`6.1.9+dfsg1-0+deb12u1`	fixed
Debian	jscropperui	sid	`1.2.2-2`	fixed
Debian	jscropperui	forky	`1.2.2-2`	fixed
Debian	jscropperui	trixie	`1.2.2-2`	fixed
Debian	jscropperui	bookworm	`1.2.2-1.1`	fixed
Debian	prototypejs	sid	`1.7.3-2`	fixed
Debian	prototypejs	forky	`1.7.3-2`	fixed
Debian	prototypejs	trixie	`1.7.3-2`	fixed
Debian	prototypejs	bookworm	`1.7.3-1`	fixed
Debian	scriptaculous	sid	`1.9.0-6`	fixed
Debian	scriptaculous	forky	`1.9.0-6`	fixed
Debian	scriptaculous	trixie	`1.9.0-4`	fixed
Debian	scriptaculous	bookworm	`1.9.0-3`	fixed
Debian	libhtml-prototype-perl	sid	`1.48-6`	fixed
Debian	libhtml-prototype-perl	forky	`1.48-6`	fixed
Debian	libhtml-prototype-perl	trixie	`1.48-6`	fixed
Debian	libhtml-prototype-perl	bookworm	`1.48-6`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	zabbix	source	sid	`Not affected`	unimportant	Not reported	Not reported
Debian	zabbix	source	forky	`Not affected`	unimportant	Not reported	Not reported
Debian	zabbix	source	trixie	`Not affected`	unimportant	Not reported	Not reported
Debian	zabbix	source	bookworm	`Not affected`	unimportant	Not reported	Not reported
Debian	symfony	source	sid	`1.0.21-1.1`	low	Not reported	[555250]
Debian	symfony	source	forky	`1.0.21-1.1`	low	Not reported	[555250]
Debian	symfony	source	trixie	`1.0.21-1.1`	low	Not reported	[555250]
Debian	symfony	source	bookworm	`1.0.21-1.1`	low	Not reported	[555250]
Debian	passenger	source	sid	`Not affected`	unimportant	Not reported	Not reported
Debian	passenger	source	forky	`Not affected`	unimportant	Not reported	Not reported
Debian	passenger	source	trixie	`Not affected`	unimportant	Not reported	Not reported
Debian	passenger	source	bookworm	`Not affected`	unimportant	Not reported	Not reported
Debian	wordpress	source	sid	`2.5.0-2`	low	Not reported	[555242]
Debian	wordpress	source	forky	`2.5.0-2`	low	Not reported	[555242]
Debian	wordpress	source	trixie	`2.5.0-2`	low	Not reported	[555242]
Debian	wordpress	source	bookworm	`2.5.0-2`	low	Not reported	[555242]
Debian	jscropperui	source	sid	`1.2.1-1`	low	Not reported	[555255]
Debian	jscropperui	source	forky	`1.2.1-1`	low	Not reported	[555255]
Debian	jscropperui	source	trixie	`1.2.1-1`	low	Not reported	[555255]
Debian	jscropperui	source	bookworm	`1.2.1-1`	low	Not reported	[555255]
Debian	prototypejs	source	sid	`1.6.0.2-1`	not yet assigned	Not reported	Not reported
Debian	prototypejs	source	forky	`1.6.0.2-1`	not yet assigned	Not reported	Not reported
Debian	prototypejs	source	trixie	`1.6.0.2-1`	not yet assigned	Not reported	Not reported
Debian	prototypejs	source	bookworm	`1.6.0.2-1`	not yet assigned	Not reported	Not reported
Debian	scriptaculous	source	sid	`1.8.3-1`	low	Not reported	[555259]
Debian	scriptaculous	source	forky	`1.8.3-1`	low	Not reported	[555259]
Debian	scriptaculous	source	trixie	`1.8.3-1`	low	Not reported	[555259]
Debian	scriptaculous	source	bookworm	`1.8.3-1`	low	Not reported	[555259]
Debian	libhtml-prototype-perl	source	sid	`1.48-3`	low	Not reported	[558977]
Debian	libhtml-prototype-perl	source	forky	`1.48-3`	low	Not reported	[558977]
Debian	libhtml-prototype-perl	source	trixie	`1.48-3`	low	Not reported	[558977]
Debian	libhtml-prototype-perl	source	bookworm	`1.48-3`	low	Not reported	[558977]

[Debian bug #555250][Debian bug #555242][Debian bug #555255][Debian bug #555259][Debian bug #558977]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libapache2-mod-passenger]Unknown
Source package: [passenger]
Details (2)
- 6.0.17+ds-1 · amd64 · bookworm
  Not affected
  dsa · passenger · debian · bookworm
- 6.0.17+ds-1 · arm64 · bookworm
  Not affected
  dsa · passenger · debian · bookworm
[libhtml-prototype-perl]Unknown
Details (2)
- 1.48-6 · all · bookworm
  Fixed · Fixed: 1.48-3
  dsa · libhtml-prototype-perl · debian · bookworm; dsa · libhtml-prototype-perl · debian · 12
- 1.48-6 · all · bookworm
  Fixed · Fixed: 1.48-3
  dsa · libhtml-prototype-perl · debian · bookworm; dsa · libhtml-prototype-perl · debian · 12
[libjs-cropper]Unknown
Source package: [jscropperui]
Details (2)
- 1.2.2-1.1 · all · bookworm
  Fixed · Fixed: 1.2.1-1
  dsa · jscropperui · debian · bookworm; dsa · jscropperui · debian · 12
- 1.2.2-1.1 · all · bookworm
  Fixed · Fixed: 1.2.1-1
  dsa · jscropperui · debian · bookworm; dsa · jscropperui · debian · 12
[libjs-prototype]Unknown
Source package: [prototypejs]
Details (2)
- 1.7.3-1 · all · bookworm
  Fixed · Fixed: 1.6.0.2-1
  dsa · prototypejs · debian · bookworm; dsa · prototypejs · debian · 12
- 1.7.3-1 · all · bookworm
  Fixed · Fixed: 1.6.0.2-1
  dsa · prototypejs · debian · bookworm; dsa · prototypejs · debian · 12
[libjs-scriptaculous]Unknown
Source package: [scriptaculous]
Details (2)
- 1.9.0-3 · all · bookworm
  Fixed · Fixed: 1.8.3-1
  dsa · scriptaculous · debian · bookworm; dsa · scriptaculous · debian · 12
- 1.9.0-3 · all · bookworm
  Fixed · Fixed: 1.8.3-1
  dsa · scriptaculous · debian · bookworm; dsa · scriptaculous · debian · 12
[passenger]Unknown
Details (2)
- 6.0.17+ds-1 · amd64 · bookworm
  Not affected
  dsa · passenger · debian · bookworm
- 6.0.17+ds-1 · arm64 · bookworm
  Not affected
  dsa · passenger · debian · bookworm
[php-symfony]Unknown
Source package: [symfony]
Details (4)
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
[php-symfony-all-my-sms-notifier]Unknown
Source package: [symfony]
Details (4)
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
[php-symfony-amazon-mailer]Unknown
Source package: [symfony]
Details (4)
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
[php-symfony-amazon-sns-notifier]Unknown
Source package: [symfony]
Details (4)
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
[php-symfony-amazon-sqs-messenger]Unknown
Source package: [symfony]
Details (4)
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
[php-symfony-amqp-messenger]Unknown
Source package: [symfony]
Details (4)
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
[php-symfony-asset]Unknown
Source package: [symfony]
Details (4)
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
[php-symfony-beanstalkd-messenger]Unknown
Source package: [symfony]
Details (4)
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
[php-symfony-browser-kit]Unknown
Source package: [symfony]
Details (4)
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
[php-symfony-cache]Unknown
Source package: [symfony]
Details (4)
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
[php-symfony-clickatell-notifier]Unknown
Source package: [symfony]
Details (4)
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
[php-symfony-config]Unknown
Source package: [symfony]
Details (4)
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
[php-symfony-console]Unknown
Source package: [symfony]
Details (4)
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
[php-symfony-crowdin-translation-provider]Unknown
Source package: [symfony]
Details (4)
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- 5.4.53+dfsg-0+deb12u1 · all · bookworm-security
  Fixed · Fixed: 1.0.21-1.1
  dsa · symfony · debian · bookworm; dsa · symfony · debian · 12

Next results

Observed: Oct 23, 2026, 5:04:27 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]