CVE-2014-0014

Published: Feb 15, 2018Modified: Nov 21, 2024

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application using the "{{group}}" Helper and a crafted payload.

Affected (38)

Products: Emberjs: Ember.js

Emberjs

1 product

Ember.js

Configuration A

38 vulnerable

Vulnerable Software	Affected Versions
Emberjs Ember.js	Version 1.0.0
Emberjs Ember.js	Version 1.0.0 pre.2
Emberjs Ember.js	Version 1.0.0 pre.3
Emberjs Ember.js	Version 1.0.0 pre.4
Emberjs Ember.js	Version 1.0.0 rc.1.1
Emberjs Ember.js	Version 1.0.0 rc.1
Emberjs Ember.js	Version 1.0.0 rc.2.1
Emberjs Ember.js	Version 1.0.0 rc.2
Emberjs Ember.js	Version 1.0.0 rc.3.1
Emberjs Ember.js	Version 1.0.0 rc.3
Emberjs Ember.js	Version 1.0.0 rc.4.1
Emberjs Ember.js	Version 1.0.0 rc.4
Emberjs Ember.js	Version 1.0.0 rc.5.1
Emberjs Ember.js	Version 1.0.0 rc.5
Emberjs Ember.js	Version 1.0.0 rc.6.1
Emberjs Ember.js	Version 1.0.0 rc.6
Emberjs Ember.js	Version 1.0.0 rc.7
Emberjs Ember.js	Version 1.0.0 rc.8
Emberjs Ember.js	Version 1.0.0 rc4
Emberjs Ember.js	Version 1.1.0
Emberjs Ember.js	Version 1.1.0 beta.1
Emberjs Ember.js	Version 1.1.0 beta.2
Emberjs Ember.js	Version 1.1.0 beta.3
Emberjs Ember.js	Version 1.1.0 beta.4
Emberjs Ember.js	Version 1.1.1
Emberjs Ember.js	Version 1.1.2
Emberjs Ember.js	Version 1.2.0
Emberjs Ember.js	Version 1.2.0 beta.1
Emberjs Ember.js	Version 1.2.0 beta.2
Emberjs Ember.js	Version 1.2.0 beta.3
Emberjs Ember.js	Version 1.2.0 beta.4
Emberjs Ember.js	Version 1.3.0
Emberjs Ember.js	Version 1.3.0 beta.1
Emberjs Ember.js	Version 1.3.0 beta.2
Emberjs Ember.js	Version 1.3.0 beta.3
Emberjs Ember.js	Version 1.3.0 beta.4
Emberjs Ember.js	Version 1.4.0
Emberjs Ember.js	Version 1.4.0 beta.1