EUVD-2022-5153

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Ember.js prior to 1.0.1, 1.1.3, 1.2.1, 1.3.1, and 1.4.0-beta.2 exposes XSS vulnerabilities via crafted payloads.

Reporter	Title	Published	Views	Family All 9
CVE	CVE-2014-0014	15 Feb 201821:00	–	cve
Cvelist	CVE-2014-0014	15 Feb 201821:00	–	cvelist
Github Security Blog	ember-source Cross-site Scripting vulnerability	14 May 202202:21	–	github
NVD	CVE-2014-0014	15 Feb 201821:29	–	nvd
Oracle	Oracle Critical Patch Update - October 2018	18 Dec 201800:00	–	oracle
OSV	GHSA-RCX6-7JP6-PQF2 ember-source Cross-site Scripting vulnerability	14 May 202202:21	–	osv
Prion	Cross site scripting	15 Feb 201821:29	–	prion
RubySec	Ember.js Potential XSS Exploit With User-Supplied Data When Using {{group}} Helper	14 Jan 201400:00	–	rubygems
SUSE CVE	SUSE CVE-2014-0014	15 Feb 202305:33	–	susecve

[
  {
    "enisaIdVendor": [
      {
        "id": "0d802bbc-e8fd-3330-bdb6-1f1aa1b4b6db",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "87a53dd0-cf1e-3f21-bb96-831041e73a87",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-0014
github	www.github.com/emberjs/ember.js/commit/12fa46ba1c6efb9ddac7bfdef7f4f6909781c801
github	www.github.com/emberjs/ember.js
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/ember-source/CVE-2014-0014.yml
groups	www.groups.google.com/forum/
emberjs	www.emberjs.com/blog/2014/01/14/ember-security-releases.html
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
suse	www.suse.com/security/cve/CVE-2014-0014.html
groups	www.groups.google.com/forum/

03 Oct 2025 20:07Current

6Medium risk

Vulners AI Score6

CVSS 35.4

CVSS 23.5

EPSS0.00301