CVE-2015-1866

Cross-site scripting (XSS) vulnerability in Ember.js 1.10.x before 1.10.1 and 1.11.x before 1.11.2.

• CWE-79

• http://www.openwall.com/lists/oss-security/2015/04/14/11Exploit, Mailing List, Mitigation, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/74185Third Party Advisory, VDB Entry
• https://emberjs.com/blog/2015/04/14/security-and-bugfix-releases-ember-1-10-1-1-11-2-1-11-3.htmlVendor Advisory
• http://www.openwall.com/lists/oss-security/2015/04/14/11Exploit, Mailing List, Mitigation, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/74185Third Party Advisory, VDB Entry
• https://emberjs.com/blog/2015/04/14/security-and-bugfix-releases-ember-1-10-1-1-11-2-1-11-3.htmlVendor Advisory

Published

Sep 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1860Multiple buffer overflows in gui/image/qgifhandler.cpp in th…
• CVE-2015-1861Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-1862The crash reporting feature in Abrt allows local users to ga…
• CVE-2015-1863Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4…
• CVE-2015-1864Multiple cross-site scripting (XSS) vulnerabilities in the a…
• CVE-2015-1865fts.c in coreutils 8.4 allows local users to delete arbitrar…5.1
• CVE-2015-1867Pacemaker before 1.1.13 does not properly evaluate added nod…
• CVE-2015-1868The label decompression functionality in PowerDNS Recursor 3…
• CVE-2015-1869The default event handling scripts in Automatic Bug Reportin…7.8
• CVE-2015-1870The event scripts in Automatic Bug Reporting Tool (ABRT) use…
• CVE-2015-1871Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-1872The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in…