Skip to content
OpenAdvisories

Package · RubyGems

ember-source

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.1
    CVE-2013-4170

    Ember.js Potential XSS Exploit When Binding `tagName` to User-Supplied Data

    In general, Ember.js escapes or strips any user-supplied content before inserting it in strings that will be sent to innerHTML. However, the `tagName` property of an `Ember.View` was inserted into such a string without being sanitized. This means that if an a…

    ember-source RubyGems
  • Medium 5.4
    CVE-2014-0013

    Ember.js Cross-site Scripting vulnerability

    Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application that contains templates whose context is …

    ember-source RubyGems
  • Medium 5.4
    CVE-2014-0014

    ember-source Cross-site Scripting vulnerability

    Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application using the "{{group}}" Helper and a crafte…

    ember-source RubyGems
  • Medium 6.1
    CVE-2015-1866

    ember-source vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in Ember.js 1.10.x before 1.10.1 and 1.11.x before 1.11.2.

    ember-source RubyGems
  • Medium 6.1
    CVE-2015-7565

    ember-source Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x through 1.10.x, 1.11.x before 1.11.4, 1.12.x before 1.12.2, 1.13.x before 1.13.12, 2.0.x before 2.0.3, 2.1.x before 2.1.2, and 2.2.x before 2.2.1 allows remote attackers to inject arbitrary web script…

    ember-source RubyGems