Cross-site scripting in angular.js
Priority LOW 28CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Partial Red Hat: 7 fixed, 8 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-79.
Summary
angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "<option>" elements in "<select>" ones changes parsing behavior, leading to possibly unsanitizing code.
Why it matters now
EPSS 0.01932 80th percentileScored 2026-11-07
Fix Partial angular.js: 1.8.0angular (npm): 1.8.0Red Hat: 7 advisoriesRed Hat: 7 fixed, 8 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | angular.js | before 1.8.0 | 1.8.0 | Patch available | CNA |
| — | angular (npm) | before 1.8.0 | 1.8.0 | Patch available | GHSA-mhp6-pxh8-r675 |
- angular.js Vendor— Affected before 1.8.0 Fixed in 1.8.0 Patch available CNA
- angular (npm) Vendor— Affected before 1.8.0 Fixed in 1.8.0 Patch available GHSA-mhp6-pxh8-r675
Remediation
- Fix · CNA angular.js Fixed in 1.8.0
- Fix · GHSA-mhp6-pxh8-r675 angular (npm) Fixed in 1.8.0 Advisory →
Red Hat 7 advisories
- RHSA-2021:0969 Released 2021-03-23 · Red Hat rating LowRed Hat Single Sign-On 7.4.6 security update on RHEL 8
- Red Hat Single Sign-On 7.4 for RHEL 8 rh-sso7-keycloak-9.0.12-1.redhat_00001.1.el8sso, rh-sso7-keycloak-server-9.0.12-1.redhat_00001.1.el8sso
- RHSA-2021:0967 Released 2021-03-23 · Red Hat rating LowRed Hat Single Sign-On 7.4.6 security update on RHEL 6
- Red Hat Single Sign-On 7.4 for RHEL 6 Server rh-sso7-keycloak-9.0.12-1.redhat_00001.1.el6sso, rh-sso7-keycloak-server-9.0.12-1.redhat_00001.1.el6sso
- RHSA-2021:0968 Released 2021-03-23 · Red Hat rating LowRed Hat Single Sign-On 7.4.6 security update on RHEL 7
- Red Hat Single Sign-On 7.4 for RHEL 7 Server rh-sso7-keycloak-9.0.12-1.redhat_00001.1.el7sso, rh-sso7-keycloak-server-9.0.12-1.redhat_00001.1.el7sso
Show 4 more Red Hat advisories
- RHSA-2021:0974 Released 2021-03-23 · Red Hat rating ModerateRed Hat Single Sign-On 7.4.6 security update
- Red Hat Single Sign-On 7.4.6
- RHSA-2021:0417 Released 2021-02-04 · Red Hat rating ModerateRed Hat AMQ Broker 7.8.1 release and security update
- Red Hat AMQ 7.8.1
- RHSA-2020:5568 Released 2020-12-16 · Red Hat rating ImportantRed Hat Fuse 7.8.0 release and security update
- Red Hat Fuse 7.8.0
- RHSA-2020:5249 Released 2020-11-30 · Red Hat rating Moderatesecurity update - Red Hat Ansible Tower 3.7.4-1 - RHEL7 Container
- Red Hat Ansible Tower 3.7 for RHEL 7 ansible-tower-37/ansible-tower-rhel7
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| OpenShift Service Mesh 1 | Affected | No fix planned: Will not fix |
| Red Hat AMQ Broker 7 | Affected | No fix yet |
| Red Hat Decision Manager 7 | Affected | No fix planned: Out of support scope |
| Red Hat Fuse 7 | Affected | No fix yet |
| Red Hat OpenShift Container Platform 3.11 | Affected | No fix planned: Will not fix |
| Red Hat OpenShift Container Platform 4 | Affected | No fix planned: Will not fix |
| Red Hat Process Automation 7 | Affected | No fix planned: Out of support scope |
| Red Hat Storage 3 | Affected | No fix planned: Will not fix |
| Red Hat AMQ 7.8.1 | Fixed | RHSA-2021:0417 |
| Red Hat Ansible Tower 3.7 for RHEL 7 | Fixed | RHSA-2020:5249 |
| Red Hat Fuse 7.8.0 | Fixed | RHSA-2020:5568 |
| Red Hat Single Sign-On 7.4 for RHEL 6 Server | Fixed | RHSA-2021:0967 |
| Red Hat Single Sign-On 7.4 for RHEL 7 Server | Fixed | RHSA-2021:0968 |
| Red Hat Single Sign-On 7.4 for RHEL 8 | Fixed | RHSA-2021:0969 |
| Red Hat Single Sign-On 7.4.6 | Fixed | RHSA-2021:0974 |
Not affected: 1 product
- Red Hat Quay 3
Timeline
- 2026-10-02 Threatist record created from CVE-2020-7676
- 2026-10-03 Alias added: GHSA-mhp6-pxh8-r675
References
Other 24
- https://github.com/angular/angular.js/pull/17028%2C
- [nifi-commits] 20200930 svn commit: r1882168 - /nifi/site/trunk/security.html
- [hadoop-ozone-issues] 20201006 [jira] [Updated] (HDDS-4316) Upgrade to angular 1.8.0 due to CVE-2020-7676
- [hadoop-ozone-issues] 20201006 [GitHub] [hadoop-ozone] vivekratnavel opened a new pull request #1481: HDDS-4316. Upgrade to angular 1.8.0 due to CVE-2020-7676
- [hadoop-ozone-issues] 20201006 [jira] [Created] (HDDS-4316) Upgrade to angular 1.8.0 due to CVE-2020-7676
- [hadoop-ozone-issues] 20201006 [GitHub] [hadoop-ozone] dineshchitlangia commented on a change in pull request #1481: HDDS-4316. Upgrade to angular 1.8.0 due to CVE-2020-7676
- [hadoop-ozone-issues] 20201007 [GitHub] [hadoop-ozone] vivekratnavel commented on pull request #1481: HDDS-4316. Upgrade to angular 1.8.0 due to CVE-2020-7676
- [hadoop-ozone-issues] 20201008 [jira] [Updated] (HDDS-4316) Upgrade to angular 1.8.0 due to CVE-2020-7676
- [hadoop-ozone-commits] 20201008 [hadoop-ozone] branch master updated: HDDS-4316. Upgrade to angular 1.8.0 due to CVE-2020-7676 (#1481)
- [hadoop-ozone-issues] 20201008 [GitHub] [hadoop-ozone] adoroszlai merged pull request #1481: HDDS-4316. Upgrade to angular 1.8.0 due to CVE-2020-7676
- [hadoop-ozone-issues] 20201009 [GitHub] [hadoop-ozone] adoroszlai merged pull request #1481: HDDS-4316. Upgrade to angular 1.8.0 due to CVE-2020-7676
- https://github.com/angular/angular.js/pull/17028
- https://github.com/angular/angular.js/commit/2df43c07779137d1bddf7f3b282a1287a8634acd
- https://lists.apache.org/thread.html/rfa2b19d01d10a8637dc319a7d5994c3dbdb88c0a8f9a21533403577a@%3Cozone-issues.hadoop.apache.org%3E
- https://lists.apache.org/thread.html/rda99599896c3667f2cc9e9d34c7b6ef5d2bbed1f4801e1d75a2b0679@%3Ccommits.nifi.apache.org%3E
- https://lists.apache.org/thread.html/rb6423268b25db0f800359986867648e11dbd38e133b9383e85067f02@%3Cozone-issues.hadoop.apache.org%3E
- https://lists.apache.org/thread.html/r80f210a5f4833d59c5d3de17dd7312f9daba0765ec7d4052469f13f1@%3Cozone-commits.hadoop.apache.org%3E
- https://lists.apache.org/thread.html/r79e3feaaf87b81e80da0e17a579015f6dcb94c95551ced398d50c8d7@%3Cozone-issues.hadoop.apache.org%3E
- https://lists.apache.org/thread.html/r57383582dcad2305430321589dfaca6793f5174c55da6ce8d06fbf9b@%3Cozone-issues.hadoop.apache.org%3E
- https://lists.apache.org/thread.html/r455ebd83a1c69ae8fd897560534a079c70a483dbe1e75504f1ca499b@%3Cozone-issues.hadoop.apache.org%3E
- https://lists.apache.org/thread.html/r446c297cd6cda2bd7e345c9b0741d7f611df89902e5d515848c6f4b1@%3Cozone-issues.hadoop.apache.org%3E
- https://lists.apache.org/thread.html/r3f05cfd587c774ea83c18e59eda9fa37fa9bbf3421484d4ee1017a20@%3Cozone-issues.hadoop.apache.org%3E
- https://lists.apache.org/thread.html/r198985c02829ba8285ed4f9b1de54a33b5f31b08bb38ac51fc86961b@%3Cozone-issues.hadoop.apache.org%3E
- https://github.com/angular/angular.js
More Angularjs vulnerabilities
- TI-2023-11343 Regular expression denial of service in angular CVSS 3.1MEDIUM 5.3
- TI-2023-11342 Regular expression denial of service in angular CVSS 3.1MEDIUM 5.3
- TI-2023-11341 Regular expression denial of service in angular CVSS 3.1MEDIUM 5.3
- TI-2024-07764 AngularJS improper sanitization in '<source>' element CVSS 3.1MEDIUM 4.8
- TI-2024-07763 AngularJS improper sanitization in 'srcset' attribute CVSS 3.1MEDIUM 4.8
- TI-2022-09411 Regular expression denial of service (ReDoS) in angular CVSS 3.1HIGH 7.5
Sources
- CVE-2020-7676 · CVE Program
- CVE-2020-7676 · NVD
- FIRST EPSS
- GHSA-mhp6-pxh8-r675 · GitHub Advisory Database · CC BY 4.0
- CVE-2020-7676 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences