NetSight
medium6.1

CVE-2019-14863

There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers dat…

Impact

There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.

Affected products

VendorProductAffected versions
AngularjsAngularjs
from 1.0.0 through 1.4.14
RedhatDecision Manager
Version 7.0
RedhatProcess Automation
Version 7.0

Weakness classification

References