Description
Same Origin Method Execution (SOME) is a web application attack which abuses callback endpoints by forcing a victim into executing arbitrary scripting methods of any page on the endpoint's domain.
Remediation
Same Origin Method Execution (SOME) can be mitigated using static callbacks, a white-list approach or cross-domain messaging. Consult Web references for more information about Mitigation and Fix.
References
Related Vulnerabilities
PHP Improper Input Validation Vulnerability (CVE-2007-2509)
Deserialization of Untrusted Data (Java JSON Deserialization) Jackson
SharePoint Improper Input Validation Vulnerability (CVE-2020-1025)
WordPress Plugin Flamingo CSV Injection (2.1)
Squid Improper Input Validation Vulnerability (CVE-2020-8517)