EUVD-2018-0414

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Cross-site scripting vulnerability in Ember.js versions 1.10.x and 1.11.x prior to updates.

Reporter	Title	Published	Views	Family All 8
CNVD	Tilde Ember.js Cross-Site Scripting Vulnerability	26 Apr 201500:00	–	cnvd
CVE	CVE-2015-1866	20 Sep 201718:00	–	cve
Cvelist	CVE-2015-1866	20 Sep 201718:00	–	cvelist
Github Security Blog	ember-source vulnerable to Cross-site Scripting	28 Aug 201822:34	–	github
NVD	CVE-2015-1866	20 Sep 201718:29	–	nvd
OSV	GHSA-MP78-R56V-45QC ember-source vulnerable to Cross-site Scripting	28 Aug 201822:34	–	osv
Prion	Cross site scripting	20 Sep 201718:29	–	prion
RubySec	Ember.js XSS Vulnerability With {{view "select"}} Options	14 Apr 201500:00	–	rubygems

[
  {
    "enisaIdVendor": [
      {
        "id": "7e95b068-518d-3a18-8150-90ed218300f7",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a193bf5f-3cf4-3260-8a1f-b34709fc1cb8",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-1866
emberjs	www.emberjs.com/blog/2015/04/14/security-and-bugfix-releases-ember-1-10-1-1-11-2-1-11-3.html
github	www.github.com/Acidburn0zzz/ember.js
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/ember-source/CVE-2015-1866.yml
groups	www.groups.google.com/forum/
web	www.web.archive.org/web/20200228155301/http://www.securityfocus.com/bid/74185
openwall	www.openwall.com/lists/oss-security/2015/04/14/11
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.3Medium risk

Vulners AI Score6.3

CVSS 36.1

CVSS 24.3

EPSS0.0033

xss vulnerability ember.js security update