CVE-2021-4231
Angular vulnerable to Cross-site Scripting
概要
Angular vulnerable to Cross-site Scripting
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to version 10.2.5, 11.0.5 or 11.1.0-next.3 is advised to to address this issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
npm
@angular/core
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"10.2.5"}]}]
参照URL
- advisory nvd.nist.gov
- package github.com
- web github.com
- web github.com
- web github.com
- web github.com
- web security.snyk.io
- web vuldb.com