Catalogo CVE
CVE-2008-7220
jscropperui: CVE-2008-7220
- Gravità
- Medium
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 13.36% · Oct 22, 2026
Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | zabbix | sid | 1:7.0.29+dfsg-2 | not affected |
| Debian | zabbix | forky | 1:7.0.29+dfsg-2 | not affected |
| Debian | zabbix | trixie | 1:7.0.22+dfsg-1~deb13u1 | not affected |
| Debian | zabbix | bookworm | 1:6.0.14+dfsg-1 | not affected |
| Debian | symfony | sid | 7.4.21+dfsg-1 | fixed |
| Debian | symfony | forky | 7.4.21+dfsg-1 | fixed |
| Debian | symfony | trixie | 6.4.41+dfsg-0+deb13u1 | fixed |
| Debian | symfony | trixie-security | 6.4.41+dfsg-0+deb13u1 | fixed |
| Debian | symfony | bookworm | 5.4.53+dfsg-0+deb12u1 | fixed |
| Debian | symfony | bookworm-security | 5.4.53+dfsg-0+deb12u1 | fixed |
| Debian | passenger | sid | 6.2.0+ds-1 | not affected |
| Debian | passenger | forky | 6.2.0+ds-1 | not affected |
| Debian | passenger | trixie | 6.0.26+ds-1.1 | not affected |
| Debian | passenger | bookworm | 6.0.17+ds-1 | not affected |
| Debian | wordpress | sid | 7.1.3+dfsg1-1 | fixed |
| Debian | wordpress | forky | 7.1.3+dfsg1-1 | fixed |
| Debian | wordpress | trixie | 6.8.7+dfsg1-0+deb13u1 | fixed |
| Debian | wordpress | trixie-security | 6.8.10+dfsg1-0+deb13u1 | fixed |
| Debian | wordpress | bookworm | 6.1.9+dfsg1-0+deb12u1 | fixed |
| Debian | wordpress | bookworm-security | 6.1.9+dfsg1-0+deb12u1 | fixed |
| Debian | jscropperui | sid | 1.2.2-2 | fixed |
| Debian | jscropperui | forky | 1.2.2-2 | fixed |
| Debian | jscropperui | trixie | 1.2.2-2 | fixed |
| Debian | jscropperui | bookworm | 1.2.2-1.1 | fixed |
| Debian | prototypejs | sid | 1.7.3-2 | fixed |
| Debian | prototypejs | forky | 1.7.3-2 | fixed |
| Debian | prototypejs | trixie | 1.7.3-2 | fixed |
| Debian | prototypejs | bookworm | 1.7.3-1 | fixed |
| Debian | scriptaculous | sid | 1.9.0-6 | fixed |
| Debian | scriptaculous | forky | 1.9.0-6 | fixed |
| Debian | scriptaculous | trixie | 1.9.0-4 | fixed |
| Debian | scriptaculous | bookworm | 1.9.0-3 | fixed |
| Debian | libhtml-prototype-perl | sid | 1.48-6 | fixed |
| Debian | libhtml-prototype-perl | forky | 1.48-6 | fixed |
| Debian | libhtml-prototype-perl | trixie | 1.48-6 | fixed |
| Debian | libhtml-prototype-perl | bookworm | 1.48-6 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | zabbix | source | sid | Not affected | unimportant | Not reported | Not reported |
| Debian | zabbix | source | forky | Not affected | unimportant | Not reported | Not reported |
| Debian | zabbix | source | trixie | Not affected | unimportant | Not reported | Not reported |
| Debian | zabbix | source | bookworm | Not affected | unimportant | Not reported | Not reported |
| Debian | symfony | source | sid | 1.0.21-1.1 | low | Not reported | [555250] |
| Debian | symfony | source | forky | 1.0.21-1.1 | low | Not reported | [555250] |
| Debian | symfony | source | trixie | 1.0.21-1.1 | low | Not reported | [555250] |
| Debian | symfony | source | bookworm | 1.0.21-1.1 | low | Not reported | [555250] |
| Debian | passenger | source | sid | Not affected | unimportant | Not reported | Not reported |
| Debian | passenger | source | forky | Not affected | unimportant | Not reported | Not reported |
| Debian | passenger | source | trixie | Not affected | unimportant | Not reported | Not reported |
| Debian | passenger | source | bookworm | Not affected | unimportant | Not reported | Not reported |
| Debian | wordpress | source | sid | 2.5.0-2 | low | Not reported | [555242] |
| Debian | wordpress | source | forky | 2.5.0-2 | low | Not reported | [555242] |
| Debian | wordpress | source | trixie | 2.5.0-2 | low | Not reported | [555242] |
| Debian | wordpress | source | bookworm | 2.5.0-2 | low | Not reported | [555242] |
| Debian | jscropperui | source | sid | 1.2.1-1 | low | Not reported | [555255] |
| Debian | jscropperui | source | forky | 1.2.1-1 | low | Not reported | [555255] |
| Debian | jscropperui | source | trixie | 1.2.1-1 | low | Not reported | [555255] |
| Debian | jscropperui | source | bookworm | 1.2.1-1 | low | Not reported | [555255] |
| Debian | prototypejs | source | sid | 1.6.0.2-1 | not yet assigned | Not reported | Not reported |
| Debian | prototypejs | source | forky | 1.6.0.2-1 | not yet assigned | Not reported | Not reported |
| Debian | prototypejs | source | trixie | 1.6.0.2-1 | not yet assigned | Not reported | Not reported |
| Debian | prototypejs | source | bookworm | 1.6.0.2-1 | not yet assigned | Not reported | Not reported |
| Debian | scriptaculous | source | sid | 1.8.3-1 | low | Not reported | [555259] |
| Debian | scriptaculous | source | forky | 1.8.3-1 | low | Not reported | [555259] |
| Debian | scriptaculous | source | trixie | 1.8.3-1 | low | Not reported | [555259] |
| Debian | scriptaculous | source | bookworm | 1.8.3-1 | low | Not reported | [555259] |
| Debian | libhtml-prototype-perl | source | sid | 1.48-3 | low | Not reported | [558977] |
| Debian | libhtml-prototype-perl | source | forky | 1.48-3 | low | Not reported | [558977] |
| Debian | libhtml-prototype-perl | source | trixie | 1.48-3 | low | Not reported | [558977] |
| Debian | libhtml-prototype-perl | source | bookworm | 1.48-3 | low | Not reported | [558977] |
[Debian bug #555250][Debian bug #555242][Debian bug #555255][Debian bug #555259][Debian bug #558977]
OpenFactory catalog packages
L’associazione dei pacchetti è in corso.
[Debian 12 (Bookworm)]
- [libapache2-mod-passenger]Sconosciuto
Pacchetto sorgente: [passenger]
Dettagli (2)
6.0.17+ds-1· amd64 · bookwormNon interessata
dsa · passenger · debian · bookworm
6.0.17+ds-1· arm64 · bookwormNon interessata
dsa · passenger · debian · bookworm
- [libhtml-prototype-perl]Sconosciuto
Dettagli (2)
1.48-6· all · bookwormCorretta · Corretta:
1.48-3dsa · libhtml-prototype-perl · debian · bookworm; dsa · libhtml-prototype-perl · debian · 12
1.48-6· all · bookwormCorretta · Corretta:
1.48-3dsa · libhtml-prototype-perl · debian · bookworm; dsa · libhtml-prototype-perl · debian · 12
- [libjs-cropper]Sconosciuto
Pacchetto sorgente: [jscropperui]
Dettagli (2)
1.2.2-1.1· all · bookwormCorretta · Corretta:
1.2.1-1dsa · jscropperui · debian · bookworm; dsa · jscropperui · debian · 12
1.2.2-1.1· all · bookwormCorretta · Corretta:
1.2.1-1dsa · jscropperui · debian · bookworm; dsa · jscropperui · debian · 12
- [libjs-prototype]Sconosciuto
Pacchetto sorgente: [prototypejs]
Dettagli (2)
1.7.3-1· all · bookwormCorretta · Corretta:
1.6.0.2-1dsa · prototypejs · debian · bookworm; dsa · prototypejs · debian · 12
1.7.3-1· all · bookwormCorretta · Corretta:
1.6.0.2-1dsa · prototypejs · debian · bookworm; dsa · prototypejs · debian · 12
- [libjs-scriptaculous]Sconosciuto
Pacchetto sorgente: [scriptaculous]
Dettagli (2)
1.9.0-3· all · bookwormCorretta · Corretta:
1.8.3-1dsa · scriptaculous · debian · bookworm; dsa · scriptaculous · debian · 12
1.9.0-3· all · bookwormCorretta · Corretta:
1.8.3-1dsa · scriptaculous · debian · bookworm; dsa · scriptaculous · debian · 12
- [passenger]Sconosciuto
Dettagli (2)
6.0.17+ds-1· amd64 · bookwormNon interessata
dsa · passenger · debian · bookworm
6.0.17+ds-1· arm64 · bookwormNon interessata
dsa · passenger · debian · bookworm
- [php-symfony]Sconosciuto
Pacchetto sorgente: [symfony]
Dettagli (4)
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- [php-symfony-all-my-sms-notifier]Sconosciuto
Pacchetto sorgente: [symfony]
Dettagli (4)
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- [php-symfony-amazon-mailer]Sconosciuto
Pacchetto sorgente: [symfony]
Dettagli (4)
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- [php-symfony-amazon-sns-notifier]Sconosciuto
Pacchetto sorgente: [symfony]
Dettagli (4)
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- [php-symfony-amazon-sqs-messenger]Sconosciuto
Pacchetto sorgente: [symfony]
Dettagli (4)
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- [php-symfony-amqp-messenger]Sconosciuto
Pacchetto sorgente: [symfony]
Dettagli (4)
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- [php-symfony-asset]Sconosciuto
Pacchetto sorgente: [symfony]
Dettagli (4)
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- [php-symfony-beanstalkd-messenger]Sconosciuto
Pacchetto sorgente: [symfony]
Dettagli (4)
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- [php-symfony-browser-kit]Sconosciuto
Pacchetto sorgente: [symfony]
Dettagli (4)
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- [php-symfony-cache]Sconosciuto
Pacchetto sorgente: [symfony]
Dettagli (4)
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- [php-symfony-clickatell-notifier]Sconosciuto
Pacchetto sorgente: [symfony]
Dettagli (4)
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- [php-symfony-config]Sconosciuto
Pacchetto sorgente: [symfony]
Dettagli (4)
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- [php-symfony-console]Sconosciuto
Pacchetto sorgente: [symfony]
Dettagli (4)
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
- [php-symfony-crowdin-translation-provider]Sconosciuto
Pacchetto sorgente: [symfony]
Dettagli (4)
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookwormCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
5.4.53+dfsg-0+deb12u1· all · bookworm-securityCorretta · Corretta:
1.0.21-1.1dsa · symfony · debian · bookworm; dsa · symfony · debian · 12
Osservato:
Riferimenti
- [https://osv.dev/vulnerability/DEBIAN-CVE-2008-7220]
- [https://security-tracker.debian.org/tracker/CVE-2008-7220]
- [https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2168.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]