Angularjs: Security Vulnerabilities
There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.
CVSS Score
7.1
EPSS Score
0.002
Published
2020-01-02
In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload.
CVSS Score
7.5
EPSS Score
0.003
Published
2019-11-19
ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting (XSS) via Angular Expressions, if AngularJS is used in combination with ag-grid.
CVSS Score
6.1
EPSS Score
0.005
Published
2018-06-04
Page 2