GMS-2020-740: Cross-Site Request Forgery (CSRF)

August 31, 2020 (updated September 23, 2021)

Cross-Site Request Forgery (CSRF) in jquery-ujs.

References

github.com/advisories/GHSA-6qqj-rx4w-r3cj
groups.google.com/forum/
hackerone.com/reports/49935
snyk.io/vuln/npm:jquery-ujs:20150624
www.npmjs.com/advisories/15

Code Behaviors & Features

Detect and mitigate GMS-2020-740 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →