mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-06-19 17:31:42 +00:00
126 lines
3.8 KiB
JSON
126 lines
3.8 KiB
JSON
{
|
|
"id": "CVE-2014-0046",
|
|
"sourceIdentifier": "secalert@redhat.com",
|
|
"published": "2014-02-27T15:55:04.907",
|
|
"lastModified": "2023-11-07T02:18:06.177",
|
|
"vulnStatus": "Modified",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Cross-site scripting (XSS) vulnerability in the link-to helper in Ember.js 1.2.x before 1.2.2, 1.3.x before 1.3.2, and 1.4.x before 1.4.0-beta.6, when used in non-block form, allows remote attackers to inject arbitrary web script or HTML via the title attribute."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Vulnerabilidad de XSS en la ayuda link-to en Ember.js 1.2.x anterior a 1.2.2, 1.3.x anterior a 1.3.2 y 1.4.x anterior a 1.4.0-beta.6, cuando es utilizada en forma \"non-block\", permite a atacantes remotos inyectar script web o HTML arbitrarios a trav\u00e9s del atributo title."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "HIGH",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "NONE",
|
|
"integrityImpact": "PARTIAL",
|
|
"availabilityImpact": "NONE",
|
|
"baseScore": 2.6
|
|
},
|
|
"baseSeverity": "LOW",
|
|
"exploitabilityScore": 4.9,
|
|
"impactScore": 2.9,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": true
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-79"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:emberjs:ember.js:1.2.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "CBC412A0-698F-4D20-96D3-52877A8C9869"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:emberjs:ember.js:1.2.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A29E6EEF-359A-495B-B68E-78C5F6B17523"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:emberjs:ember.js:1.3.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "592FFC69-C059-45EF-B400-CDA60FC3D792"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:emberjs:ember.js:1.3.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "DDCB5E04-6CE1-48FD-8871-E40824401E24"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:emberjs:ember.js:1.4.0:beta:*:*:*:*:*:*",
|
|
"matchCriteriaId": "AF0055E7-1B33-4148-BCA4-B46AE5748C90"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://emberjs.com/blog/2014/02/07/ember-security-releases.html",
|
|
"source": "secalert@redhat.com",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/56965",
|
|
"source": "secalert@redhat.com",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.openwall.com/lists/oss-security/2014/02/14/6",
|
|
"source": "secalert@redhat.com"
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/bid/65579",
|
|
"source": "secalert@redhat.com"
|
|
},
|
|
{
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/91242",
|
|
"source": "secalert@redhat.com"
|
|
},
|
|
{
|
|
"url": "https://groups.google.com/forum/#%21topic/ember-security/1h6FRgr8lXQ",
|
|
"source": "secalert@redhat.com"
|
|
}
|
|
]
|
|
} |