GHSA-m3q7-rj8g-m457MediumCVSS 6.1
ember-source Cross-site Scripting vulnerability
🔗 CVE IDs covered (1)
📋 Description
Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x through 1.10.x, 1.11.x before 1.11.4, 1.12.x before 1.12.2, 1.13.x before 1.13.12, 2.0.x before 2.0.3, 2.1.x before 2.1.2, and 2.2.x before 2.2.1 allows remote attackers to inject arbitrary web script or HTML.
🎯 Affected products6
- rubygems/ember-source:>= 1.8.0, < 1.11.4
- rubygems/ember-source:>= 1.12.0, < 1.12.2
- rubygems/ember-source:>= 1.13.0, < 1.13.12
- rubygems/ember-source:>= 2.0.0, < 2.0.3
- rubygems/ember-source:>= 2.1.0, < 2.1.2
- rubygems/ember-source:= 2.2.0
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2015-7565
- https://groups.google.com/forum/#!topic/ember-security/OfyQkoSuppY
- http://emberjs.com/blog/2016/01/14/security-releases-ember-1-11-4-1-12-2-1-13-12-2-0-3-2-1-2-2-2-1.html
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ember-source/CVE-2015-7565.yml
- https://github.com/advisories/GHSA-m3q7-rj8g-m457