Skip to content
CVE PROGRAM SOURCE RECORD4.2 Medium

CVE-2022-25869

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting (XSS) due to insecure

Description

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting (XSS) due to insecure page caching in the Internet Explorer browser, which allows interpolation of <textarea> elements.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a angular

  • 0 to < *affected

n/a org.webjars.npm:angular

  • 0 to < *affected

n/a org.webjars.bower:angular

  • 0 to < *affected

n/a org.webjars.bowergithub.angular:angular

  • 0 to < *affected

n/a AngularJS.Core

  • 0 to < *affected

n/a angularjs

  • 0 to < *affected

References