1 results (0.003 seconds)
CVSS: 6.5EPSS: 5%CPEs: 8EXPL: 1
CVSS: 6.5EPSS: 5%CPEs: 8EXPL: 1CVE-2015-1840
https://notcve.org/view.php?id=CVE-2015-1840
26 Jul 2015 — jquery_ujs.js in jquery-rails before 3.1.3 and 4.x before 4.0.4 and rails.js in jquery-ujs before 1.0.4, as used with Ruby on Rails 3.x and 4.x, allow remote attackers to bypass the Same Origin Policy, and trigger transmission of a CSRF token to a different-domain web server, via a leading space character in a URL within an attribute value. Vulnerabilidad en jquery_ujs.js en jquery-rails en versiones anteriores a 3.1.3 y 4.x anteriores a la versión 4.0.4 y vulnerabilidad en rails.js en jquery-ujs en version... • http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160906.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •