CVE-2015-1840

Published: Jul 26, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

jquery_ujs.js in jquery-rails before 3.1.3 and 4.x before 4.0.4 and rails.js in jquery-ujs before 1.0.4, as used with Ruby on Rails 3.x and 4.x, allow remote attackers to bypass the Same Origin Policy, and trigger transmission of a CSRF token to a different-domain web server, via a leading space character in a URL within an attribute value.

Affected (8)

Products: Fedoraproject: Fedora · Rubyonrails: Jquery Rails, Jquery Ujs · Opensuse: Opensuse

1 product

2 products

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 21
Fedoraproject Fedora	Version 22

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Rubyonrails Jquery Rails	Up to 3.1.2
Rubyonrails Jquery Rails	Version 4.0.0
Rubyonrails Jquery Rails	Version 4.0.1
Rubyonrails Jquery Ujs	Up to 1.0.3

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (16)

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160906.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/161043.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-07/msg00041.html

Source: secalert@redhat.com

Third Party Advisory

http://openwall.com/lists/oss-security/2015/06/16/15

Source: secalert@redhat.com

http://www.securityfocus.com/bid/75239

Source: secalert@redhat.com

https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md

Source: secalert@redhat.com

Vendor Advisory

https://github.com/rails/jquery-ujs/blob/master/CHANGELOG.md

Source: secalert@redhat.com

Vendor Advisory

https://groups.google.com/forum/message/raw?msg=rubyonrails-security/XIZPbobuwaY/fqnzzpuOlA4J

Source: secalert@redhat.com

ExploitVendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160906.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/161043.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-07/msg00041.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://openwall.com/lists/oss-security/2015/06/16/15

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/75239

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://github.com/rails/jquery-ujs/blob/master/CHANGELOG.md

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://groups.google.com/forum/message/raw?msg=rubyonrails-security/XIZPbobuwaY/fqnzzpuOlA4J

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

Timeline

No history available yet.