https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:54:57 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-04095 cnvd-2015-04095 https://cve.radiocsirt.org/vuln/cnvd-2015-04095 https://cve.radiocsirt.org/vuln/euvd-2026-90597 EUVD-2026-90597 https://cve.radiocsirt.org/vuln/euvd-2026-90597 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1840 <p>jquery_ujs.js in jquery-rails before 3.1.3 and 4.x before 4.0.4 and rails.js in jquery-ujs before 1.0.4, as used with Ruby on Rails 3.x and 4.x, allow remote attackers to bypass the Same Origin Policy, and trigger transmission of a CSRF token to a different-domain web server, via a leading space character in a URL within an attribute value.</p> <p>jquery_ujs.js in jquery-rails before 3.1.3 and 4.x before 4.0.4 and rails.js in jquery-ujs before 1.0.4, as used with Ruby on Rails 3.x and 4.x, allow remote attackers to bypass the Same Origin Policy, and trigger transmission of a CSRF token to a different-domain web server, via a leading space character in a URL within an attribute value.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-1840 https://cve.radiocsirt.org/vuln/ghsa-4whc-pp4x-9pf3 <p><strong>Affected:</strong> RubyGems: jquery-rails, RubyGems: jquery-ujs</p> <p>jquery_ujs.js in jquery-rails before 3.1.3 and 4.x before 4.0.4 and rails.js in jquery-ujs before 1.0.4, as used with Ruby on Rails 3.x and 4.x, allow remote attackers to bypass the Same Origin Policy, and trigger transmission of a CSRF token to a different-domain web server, via a leading space character in a URL within an attribute value.</p> <p><strong>Affected:</strong> RubyGems: jquery-rails, RubyGems: jquery-ujs</p> <p>jquery_ujs.js in jquery-rails before 3.1.3 and 4.x before 4.0.4 and rails.js in jquery-ujs before 1.0.4, as used with Ruby on Rails 3.x and 4.x, allow remote attackers to bypass the Same Origin Policy, and trigger transmission of a CSRF token to a different-domain web server, via a leading space character in a URL within an attribute value.</p> https://cve.radiocsirt.org/vuln/ghsa-4whc-pp4x-9pf3 https://cve.radiocsirt.org/vuln/gsd-2015-1840 gsd-2015-1840 https://cve.radiocsirt.org/vuln/gsd-2015-1840 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10512-1 <p>ruby2.2-rubygem-jquery-rails-4.2.1-1.1 on GA media</p> <p>ruby2.2-rubygem-jquery-rails-4.2.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10512-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1840 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-jquery-rails</p> <p>jquery_ujs.js in jquery-rails before 3.1.3 and 4.x before 4.0.4 and rails.js in jquery-ujs before 1.0.4, as used with Ruby on Rails 3.x and 4.x, allow remote attackers to bypass the Same Origin Policy, and trigger transmission of a CSRF token to a different-domain web server, via a leading space character in a URL within an attribute value.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-jquery-rails</p> <p>jquery_ujs.js in jquery-rails before 3.1.3 and 4.x before 4.0.4 and rails.js in jquery-ujs before 1.0.4, as used with Ruby on Rails 3.x and 4.x, allow remote attackers to bypass the Same Origin Policy, and trigger transmission of a CSRF token to a different-domain web server, via a leading space character in a URL within an attribute value.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1840