PT-2020-21101 · Jquery · Jquery-Ujs

Published 2020-08-31 · Updated 2020-08-31

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions jquery-ujs versions 1.0.3 and earlier

Description The issue allows attackers to send CSRF tokens to external domains, potentially enabling them to launch CSRF attacks. This is possible when an attacker controls the href attribute of an anchor tag or the action attribute of a form tag triggering a POST action. By prepending a space to the external domain, it causes jQuery to consider it a same origin request, resulting in the user's CSRF token being sent to the external domain.

Recommendations Upgrade to version 1.0.4 or later.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

GHSA-6QQJ-RX4W-R3CJ

Affected Products

Jquery-Ujs

References · 5

• https://osv.dev/vulnerability/GHSA-6qqj-rx4w-r3cj · Vendor Advisory
• https://groups.google.com/forum/#!msg/rubyonrails-security/XIZPbobuwaY/fqnzzpuOlA4J · Note
• https://npmjs.com/advisories/15 · Note
• https://snyk.io/vuln/npm:jquery-ujs:20150624 · Note
• https://hackerone.com/reports/49935 · Note