Vulnerability Description
jquery_ujs.js in jquery-rails before 3.1.3 and 4.x before 4.0.4 and rails.js in jquery-ujs before 1.0.4, as used with Ruby on Rails 3.x and 4.x, allow remote attackers to bypass the Same Origin Policy, and trigger transmission of a CSRF token to a different-domain web server, via a leading space character in a URL within an attribute value.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fedoraproject | Fedora | 21 |
| Rubyonrails | Jquery-Rails | <= 3.1.2 |
| Rubyonrails | Jquery-Ujs | <= 1.0.3 |
| Opensuse | Opensuse | 13.1 |
Related Weaknesses (CWE)
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160906.htmlThird Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/161043.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-updates/2015-07/msg00041.htmlThird Party Advisory
- http://openwall.com/lists/oss-security/2015/06/16/15
- http://www.securityfocus.com/bid/75239
- https://github.com/rails/jquery-rails/blob/master/CHANGELOG.mdVendor Advisory
- https://github.com/rails/jquery-ujs/blob/master/CHANGELOG.mdVendor Advisory
- https://groups.google.com/forum/message/raw?msg=rubyonrails-security/XIZPbobuwaYExploitVendor Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160906.htmlThird Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/161043.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-updates/2015-07/msg00041.htmlThird Party Advisory
- http://openwall.com/lists/oss-security/2015/06/16/15
- http://www.securityfocus.com/bid/75239
- https://github.com/rails/jquery-rails/blob/master/CHANGELOG.mdVendor Advisory
- https://github.com/rails/jquery-ujs/blob/master/CHANGELOG.mdVendor Advisory
FAQ
What is CVE-2015-1840?
CVE-2015-1840 is a vulnerability with a CVSS score of 5.0 (MEDIUM). jquery_ujs.js in jquery-rails before 3.1.3 and 4.x before 4.0.4 and rails.js in jquery-ujs before 1.0.4, as used with Ruby on Rails 3.x and 4.x, allow remote attackers to bypass the Same Origin Policy...
How severe is CVE-2015-1840?
CVE-2015-1840 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-1840?
Check the references section above for vendor advisories and patch information. Affected products include: Fedoraproject Fedora, Rubyonrails Jquery-Rails, Rubyonrails Jquery-Ujs, Opensuse Opensuse.