The Kossy module before 0.60 for Perl allows JSON hijacking because of X-Requested-With mishandling.

Published Mar 18, 2024 · Updated Nov 25, 2024 · Assigned by mitre