CVE-2013-4170
- EPSS 0.34%
- Veröffentlicht 30.06.2022 13:15:08
- Zuletzt bearbeitet 21.11.2024 01:55:01
In general, Ember.js escapes or strips any user-supplied content before inserting it in strings that will be sent to innerHTML. However, the `tagName` property of an `Ember.View` was inserted into such a string without being sanitized. This means tha...
CVE-2014-0013
- EPSS 0.2%
- Veröffentlicht 15.02.2018 21:29:00
- Zuletzt bearbeitet 21.11.2024 02:01:10
Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application that contains templates whose co...
CVE-2014-0014
- EPSS 0.3%
- Veröffentlicht 15.02.2018 21:29:00
- Zuletzt bearbeitet 21.11.2024 02:01:10
Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application using the "{{group}}" Helper and...
CVE-2015-1866
- EPSS 0.33%
- Veröffentlicht 20.09.2017 18:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
Cross-site scripting (XSS) vulnerability in Ember.js 1.10.x before 1.10.1 and 1.11.x before 1.11.2.
CVE-2015-7565
- EPSS 0.25%
- Veröffentlicht 13.04.2017 14:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x through 1.10.x, 1.11.x before 1.11.4, 1.12.x before 1.12.2, 1.13.x before 1.13.12, 2.0.x before 2.0.3, 2.1.x before 2.1.2, and 2.2.x before 2.2.1 allows remote attackers to inject arbitrary w...
CVE-2014-0046
- EPSS 0.43%
- Veröffentlicht 27.02.2014 15:55:04
- Zuletzt bearbeitet 12.04.2025 10:46:40
Cross-site scripting (XSS) vulnerability in the link-to helper in Ember.js 1.2.x before 1.2.2, 1.3.x before 1.3.2, and 1.4.x before 1.4.0-beta.6, when used in non-block form, allows remote attackers to inject arbitrary web script or HTML via the titl...