You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
AngularJS is an MVC framework for building web applications. The core features include HTML enhanced with custom component and data-binding capabilities, dependency injection and strong focus on simplicity, testability, maintainability and boiler-plate reduction.
Path to dependency file: Hygieia/UI/node_modules/ui-select/docs-built/demo-bootstrap.html
Path to vulnerable library: Hygieia/UI/node_modules/ui-select/docs-built/demo-bootstrap.html,Hygieia/UI/node_modules/ui-select/docs-out/index.html,Hygieia/UI/node_modules/ui-select/docs/index.html
Dependency Hierarchy:
❌ angular-1.5.0.js (Vulnerable Library)
angular-1.5.5.js
AngularJS is an MVC framework for building web applications. The core features include HTML enhanced with custom component and data-binding capabilities, dependency injection and strong focus on simplicity, testability, maintainability and boiler-plate reduction.
Path to dependency file: Hygieia/UI/node_modules/angular-tablesort/example-advanced.html
Path to vulnerable library: Hygieia/UI/node_modules/angular-tablesort/example-advanced.html
Dependency Hierarchy:
❌ angular-1.5.5.js (Vulnerable Library)
angular-1.5.5.min.js
AngularJS is an MVC framework for building web applications. The core features include HTML enhanced with custom component and data-binding capabilities, dependency injection and strong focus on simplicity, testability, maintainability and boiler-plate reduction.
angular.js is vulnerable to XSS. This happens since an attacker can load Angular from the extension, and Angular's auto-bootstrapping can be used to bypass the victim site's CSP protection.
✔️ This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.
mend-bolt-for-githubbot
changed the title
WS-2017-0113 (High) detected in multiple libraries
WS-2017-0113 (High) detected in multiple libraries - autoclosed
Jun 7, 2021
WS-2017-0113 - High Severity Vulnerability
Vulnerable Libraries - angular-1.5.0.js, angular-1.5.5.js, angular-1.5.5.min.js
angular-1.5.0.js
AngularJS is an MVC framework for building web applications. The core features include HTML enhanced with custom component and data-binding capabilities, dependency injection and strong focus on simplicity, testability, maintainability and boiler-plate reduction.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/angular.js/1.5.0/angular.js
Path to dependency file: Hygieia/UI/node_modules/ui-select/docs-built/demo-bootstrap.html
Path to vulnerable library: Hygieia/UI/node_modules/ui-select/docs-built/demo-bootstrap.html,Hygieia/UI/node_modules/ui-select/docs-out/index.html,Hygieia/UI/node_modules/ui-select/docs/index.html
Dependency Hierarchy:
angular-1.5.5.js
AngularJS is an MVC framework for building web applications. The core features include HTML enhanced with custom component and data-binding capabilities, dependency injection and strong focus on simplicity, testability, maintainability and boiler-plate reduction.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/angular.js/1.5.5/angular.js
Path to dependency file: Hygieia/UI/node_modules/angular-tablesort/example-advanced.html
Path to vulnerable library: Hygieia/UI/node_modules/angular-tablesort/example-advanced.html
Dependency Hierarchy:
angular-1.5.5.min.js
AngularJS is an MVC framework for building web applications. The core features include HTML enhanced with custom component and data-binding capabilities, dependency injection and strong focus on simplicity, testability, maintainability and boiler-plate reduction.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/angular.js/1.5.5/angular.min.js
Path to dependency file: Hygieia/UI/node_modules/angular-tablesort/example.html
Path to vulnerable library: Hygieia/UI/node_modules/angular-tablesort/example.html
Dependency Hierarchy:
Found in HEAD commit: 3c4f119e4343cf7fa276bb4756361b926902248e
Found in base branch: master
Vulnerability Details
angular.js is vulnerable to XSS. This happens since an attacker can load Angular from the extension, and Angular's auto-bootstrapping can be used to bypass the victim site's CSP protection.
Publish Date: 2016-11-02
URL: WS-2017-0113
CVSS 3 Score Details (8.6)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: angular/angular.js#15346
Release Date: 2016-11-02
Fix Resolution: angular - 1.6.0
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: