-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Labels
Mend: dependency security vulnerabilitySecurity vulnerability detected by WhiteSourceSecurity vulnerability detected by WhiteSource
Description
WS-2017-0115 - Medium Severity Vulnerability
Vulnerable Library - angular-1.3.19.tgz
HTML enhanced for web apps
Library home page: https://registry.npmjs.org/angular/-/angular-1.3.19.tgz
Path to dependency file: /javascript/npm/npm-with-dev-dependencies/package.json
Path to vulnerable library: /javascript/npm/npm-with-dev-dependencies/node_modules/angular/package.json
Dependency Hierarchy:
- ❌ angular-1.3.19.tgz (Vulnerable Library)
Found in HEAD commit: 27e1f740a162e55490d9ca929f243afbaa92476c
Found in base branch: master
Vulnerability Details
angular.js doesn't sanitize a url attribute usemap
causing a potential XSS vulnerability
Publish Date: 2016-01-22
URL: WS-2017-0115
CVSS 3 Score Details (5.8)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Changed
- Impact Metrics:
- Confidentiality Impact: Low
- Integrity Impact: None
- Availability Impact: None
Step up your Open Source Security Game with Mend here
Metadata
Metadata
Assignees
Labels
Mend: dependency security vulnerabilitySecurity vulnerability detected by WhiteSourceSecurity vulnerability detected by WhiteSource