| शीर्षक | Cross-site Scripting (XSS) in Angular versions <11.0.5 || >=11.1.0-next.0 <11.1.0-next.3 |
|---|
| विवरण | Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in development, with SSR enabled.
A cross-site scripting attack occurs when the attacker tricks a legitimate web-based application or site to accept a request as originating from a trusted source. ... If malicious content is injected into an application that escapes special characters and that malicious content uses < and > as HTML tags, those characters are nonetheless not interpreted as HTML tags by the browser if they’ve been correctly escaped in the application code and in this way the attempted attack is diverted. ...
Disclosed: 2021-01-22
Published: 2021-02-10
Fixed: 2021-03-18
Patch information: https://github.com/angular/angular/commit/ba8da742e3b243e8f43d4c63aa842b44e14f2b09 and https://github.com/angular/angular/pull/40525 |
|---|
| स्रोत | ⚠️ https://snyk.io/vuln/SNYK-JS-ANGULARCORE-1070902 |
|---|
| उपयोगकर्ता | misc (UID 3) |
|---|
| सबमिशन | 24/08/2021 07:49 AM (5 साल पहले) |
|---|
| संयम | 24/08/2021 07:52 AM (3 minutes later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 181356 [Angular तक 11.0.4/11.1.0-next.2 पर npm Comment क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|