-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stemmed from improper output escaping in the {{group}} helper implementation. The commit diff shows the fix added escapeExpression handling to the simpleBind function in binding.js, which is responsible for rendering grouped content. Prior to this fix, user-controlled input passed through {{group}} would render raw HTML without sanitization. The accompanying test cases in group_test.js verify that normal mustaches now escape HTML while triple mustaches allow it, confirming the vulnerability existed in the rendering logic of the group helper's binding implementation.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| ember-source | rubygems | >= 1.0.0.pre4.0, < 1.0.1 | 1.0.1 |
| ember-source | rubygems | >= 1.1.0, < 1.1.3 | 1.1.3 |
| ember-source |
| rubygems |
| >= 1.2.0.beta.1, < 1.2.1 |
| 1.2.1 |
| ember-source | rubygems | >= 1.3.0.beta.1, < 1.3.1 | 1.3.1 |
| ember-source | rubygems | = 1.4.0-beta.1 | 1.4.0-beta.2 |