CVE-2015-1840

jquery_ujs.js in jquery-rails before 3.1.3 and 4.x before 4.0.4 and rails.js in jquery-ujs before 1.0.4, as used with Ruby on Rails 3.x and 4.x, allow remote attackers to bypass the Same Origin Policy, and trigger transmission of a CSRF token to a different-domain web server, via a leading space character in a URL within an attribute value.

• CWE-200

• http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160906.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-June/161043.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2015-07/msg00041.htmlThird Party Advisory
• http://openwall.com/lists/oss-security/2015/06/16/15
• http://www.securityfocus.com/bid/75239
• https://github.com/rails/jquery-rails/blob/master/CHANGELOG.mdVendor Advisory
• https://github.com/rails/jquery-ujs/blob/master/CHANGELOG.mdVendor Advisory
• https://groups.google.com/forum/message/raw?msg=rubyonrails-security/XIZPbobuwaY/fqnzzpuOlA4JExploit, Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160906.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-June/161043.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2015-07/msg00041.htmlThird Party Advisory
• http://openwall.com/lists/oss-security/2015/06/16/15
• http://www.securityfocus.com/bid/75239
• https://github.com/rails/jquery-rails/blob/master/CHANGELOG.mdVendor Advisory
• https://github.com/rails/jquery-ujs/blob/master/CHANGELOG.mdVendor Advisory
• https://groups.google.com/forum/message/raw?msg=rubyonrails-security/XIZPbobuwaY/fqnzzpuOlA4JExploit, Vendor Advisory

Published

Jul 26, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1834A path traversal vulnerability was identified in the Cloud F…6.5
• CVE-2015-1835Apache Cordova Android before 3.7.2 and 4.x before 4.0.2, wh…
• CVE-2015-1836Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and …
• CVE-2015-1837Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-1838modules/serverdensity_device.py in SaltStack before 2014.7.4…
• CVE-2015-1839modules/chef.py in SaltStack before 2014.7.4 does not proper…
• CVE-2015-1841The Web Admin interface in Red Hat Enterprise Virtualization…
• CVE-2015-1842The puppet manifests in the Red Hat openstack-puppet-modules…
• CVE-2015-1843The Red Hat docker package before 1.5.0-28, when using the -…
• CVE-2015-1844Foreman before 1.7.5 allows remote authenticated users to by…
• CVE-2015-1845Buffer overflow in the EntrReadArch function in unzoo might …
• CVE-2015-1846unzoo allows remote attackers to cause a denial of service (…