This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2020-7676 →
DEBIAN-CVE-2020-7676
angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "...
Original description
The description as published by the source.
angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "" elements in "" ones changes parsing behavior, leading to possibly unsanitizing code.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
angular.js
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-1"}]}]
Debian:13
angular.js
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-1"}]}]
References
- advisory security-tracker.debian.org