UBUNTU-CVE-2019-14863

Details

There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.

Affected Packages

angular.js

Ubuntu Pro 16.04 LTSUbuntu 16.04 LTS

Affected versions:

1.2.28-1ubuntu2

angular.js

Ubuntu 18.04 LTSUbuntu 20.04 LTS

Fixed in:

1.5.10-1

References

REPORThttps://snyk.io/vuln/npm:angular:20150807 REPORThttps://ubuntu.com/security/CVE-2019-14863 REPORThttps://www.cve.org/CVERecord?id=CVE-2019-14863

UBUNTU-CVE-2019-14863

Details

Affected Packages

References

CVSS Analysis

Related

Ecosystems

Timeline