Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
AngularJS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2020-7676 - Vulnerability Database
AngularJS

AngularJS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2020-7676

Medium
Reference: CVE-2020-7676
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-7676
Title: AngularJS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Overview:

angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping quotltoptiongtquot elements in quotltselectgtquot ones changes parsing behavior leading to possibly unsanitizing code.