Ember.js up to 1.4.0-beta.1 Handlebars Variable cross site scripting

Summaryinfo

A vulnerability was found in Ember.js up to 1.0.0/1.1.2/1.2.0/1.3.0/1.4.0-beta.1. It has been rated as problematic. This impacts an unknown function of the component Handlebars Variable Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2014-0013. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in Ember.js up to 1.0.0/1.1.2/1.2.0/1.3.0/1.4.0-beta.1 (JavaScript Library). It has been rated as problematic. This issue affects an unknown function of the component Handlebars Variable Handler. The manipulation with an unknown input leads to a cross site scripting vulnerability. Using CWE to declare the problem leads to CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. Impacted is integrity. The summary by CVE is:

Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application that contains templates whose context is set to a user-supplied primitive value and also contain the `{{this}}` special Handlebars variable.

The bug was discovered 01/14/2014. The weakness was shared 02/15/2018 (Website). The advisory is shared at emberjs.com. The identification of this vulnerability is CVE-2014-0013 since 12/03/2013. The attack may be initiated remotely. The successful exploitation requires a simple authentication. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1059.007 for this issue.

The vulnerability was handled as a non-public zero-day exploit for at least 1493 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 1.0.1, 1.1.2, 1.2.1, 1.3.1 or 1.4.0-beta.2 eliminates this vulnerability.

The entry VDB-113310 is related to this item. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• JavaScript Library

Name

• Ember.js

Version

• 1.0
• 1.1
• 1.1.0
• 1.1.1
• 1.1.2
• 1.2
• 1.2.0
• 1.3.0
• 1.4.0-beta.0
• 1.4.0-beta.1

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion