CVE-2015-7565 ember-source Cross-site Scripting vulnerability
MediumCVSS 6.1
EPSS 0.82%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x through 1.10.x, 1.11.x before 1.11.4, 1.12.x before 1.12.2, 1.13.x before 1.13.12, 2.0.x before 2.0.3, 2.1.x before 2.1.2, and 2.2.x before 2.2.1 allows remote attackers to inject arbitrary web script or HTML.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems ember-source(RubyGems) | >= 1.8.0, < 1.11.4 | 1.11.4 |
| rubygems ember-source(RubyGems) | >= 1.12.0, < 1.12.2 | 1.12.2 |
| rubygems ember-source(RubyGems) | >= 1.13.0, < 1.13.12 | 1.13.12 |
| rubygems ember-source(RubyGems) | >= 2.0.0, < 2.0.3 | 2.0.3 |
| rubygems ember-source(RubyGems) | >= 2.1.0, < 2.1.2 | 2.1.2 |
| rubygems ember-source(RubyGems) | = 2.2.0 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.10.0 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.10.0.beta.1 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.10.0.beta.2 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.10.0.beta.3 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.10.0.beta.4 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.10.1 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.11.0 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.11.0.1 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.11.0.beta.1 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.11.0.beta.2 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.11.0.beta.2.1 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.11.0.beta.2.2 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.11.0.beta.3 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.11.0.beta.4 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.11.0.beta.5 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.11.1 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.11.3 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.11.3.1 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.8.0 | No fix listed |
Show 59 more
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems ember-source(RubyGems) | = 1.8.1 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.9.0 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.9.0.alpha | No fix listed |
| rubygems ember-source(RubyGems) | = 1.9.0.alpha.2 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.9.0.beta.1 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.9.0.beta.1.1 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.9.0.beta.3 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.9.0.beta.4 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.9.1 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.12.0 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.12.1 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.13.0 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.13.1 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.13.1.1 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.13.10 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.13.11 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.13.2 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.13.3 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.13.4 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.13.4.1 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.13.5 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.13.6 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.13.7 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.13.8 | No fix listed |
| rubygems ember-source(RubyGems) | = 1.13.9 | No fix listed |
| rubygems ember-source(RubyGems) | = 2.0.0 | No fix listed |
| rubygems ember-source(RubyGems) | = 2.0.2 | No fix listed |
| rubygems ember-source(RubyGems) | = 2.1.0 | No fix listed |
| rubygems ember-source(RubyGems) | >= 2.2.0, < 2.2.1 | 2.2.1 |
| emberjs ember.js | = 1.8 | No fix listed |
| emberjs ember.js | = 1.8.1 | No fix listed |
| emberjs ember.js | = 1.9 | No fix listed |
| emberjs ember.js | = 1.9.1 | No fix listed |
| emberjs ember.js | = 1.10 | No fix listed |
| emberjs ember.js | = 1.10.1 | No fix listed |
| emberjs ember.js | = 1.11 | No fix listed |
| emberjs ember.js | = 1.11.1 | No fix listed |
| emberjs ember.js | = 1.11.2 | No fix listed |
| emberjs ember.js | = 1.11.3 | No fix listed |
| emberjs ember.js | = 1.12 | No fix listed |
| emberjs ember.js | = 1.12.1 | No fix listed |
| emberjs ember.js | = 1.13 | No fix listed |
| emberjs ember.js | = 1.13.1 | No fix listed |
| emberjs ember.js | = 1.13.2 | No fix listed |
| emberjs ember.js | = 1.13.3 | No fix listed |
| emberjs ember.js | = 1.13.4 | No fix listed |
| emberjs ember.js | = 1.13.5 | No fix listed |
| emberjs ember.js | = 1.13.6 | No fix listed |
| emberjs ember.js | = 1.13.7 | No fix listed |
| emberjs ember.js | = 1.13.8 | No fix listed |
| emberjs ember.js | = 1.13.9 | No fix listed |
| emberjs ember.js | = 1.13.10 | No fix listed |
| emberjs ember.js | = 1.13.11 | No fix listed |
| emberjs ember.js | = 2.0 | No fix listed |
| emberjs ember.js | = 2.0.1 | No fix listed |
| emberjs ember.js | = 2.0.2 | No fix listed |
| emberjs ember.js | = 2.1 | No fix listed |
| emberjs ember.js | = 2.1.1 | No fix listed |
| emberjs ember.js | = 2.2 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- groups.google.com
- emberjs.com release-notes vendor-advisory
- github.com exploit
- github.com