Loading...
Loading...
Portal Access code does not check if wrapped methods of XMLHttpRequest Javascript object were redefined by web application. In the worst case this allows application code to read or modify mangled URL before sending AJAX request.
Application code can read and modify already rewritten URL and send unmangled AJAX requests.
Application redefines 'open' method of XMLHttpRequest object or prototype.
None
None
Click on a version to see all relevant bugs
F5 Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.