CVE-2013-4170

2022-06-3012:38:42

CWE-79

redhat

www.cve.org

0.001 Low

EPSS

Percentile

31.0%

JSON

In general, Ember.js escapes or strips any user-supplied content before inserting it in strings that will be sent to innerHTML. However, the tagName property of an Ember.View was inserted into such a string without being sanitized. This means that if an application assigns a view’s tagName to user-supplied data, a specially-crafted payload could execute arbitrary JavaScript in the context of the current domain (“XSS”). This vulnerability only affects applications that assign or bind user-provided content to tagName.

CNA Affected

[
  {
    "product": "ember-source",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "ember-source  < 1.0.0.rc1.1"
      }
    ]
  }
]