CVE-2019-14863

There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.

Score

CVSS 3.0 7.1 High

Status

Modified - secalert@redhat.com

Published

2020-01-02

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Angularjs (Angularjs)
• Angular (Red Hat)
• Decision Manager (Redhat)
• Process Automation (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14863
• https://snyk.io/vuln/npm:angular:20150807