Unrated
The Kossy module before 0.60 for Perl allows JSON hijacking because of X-Requested-With mishandling.
CVE-2021-47157
First seen on SecPulse
References
- patch github.com
- web metacpan.org