WS-2018-0002 (Medium) detected in angular-1.2.30.tgz #90
Labels
security vulnerability
Security vulnerability detected by WhiteSource
Comments
mend-for-github-com
bot
added
the
security vulnerability
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
WS-2018-0002 - Medium Severity Vulnerability
HTML enhanced for web apps
Library home page: https://registry.npmjs.org/angular/-/angular-1.2.30.tgz
Path to dependency file: esri.github.io/package.json
Path to vulnerable library: esri.github.io/node_modules/angular/package.json
Dependency Hierarchy:
Found in HEAD commit: a4d59687db7452886288c3f1faa3a43e975f6ff8
When rendering Angular templates with a server-side templating engine like ERB or Haml it is easy to introduce XSS vulnerabilities. These vulnerabilities are enabled by AngularJS evaluating user-provided strings containing interpolation symbols (default symbols are {{ and }}).
Publish Date: 2014-05-20
URL: WS-2018-0002
Base Score Metrics not available
Type: Upgrade version
Origin: angular/angular.js@e3f78c1
Release Date: 2014-05-20
Fix Resolution: angular - 1.3.0
⛑️ Automatic Remediation is available for this issue
The text was updated successfully, but these errors were encountered: