Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
AngularJS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2019-14863 - Vulnerability Database
AngularJS

AngularJS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2019-14863

Medium
Reference: CVE-2019-14863
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-14863
Title: AngularJS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Overview:

There is a vulnerability in all angular versions before 1.5.0-beta.0 where after escaping the context of the web application the web application delivers data to its users along with other trusted dynamic content without validating it.