Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: peerigon Component: Angular-expressions Clear all filters
TI-2021-04377 CVE-2021-21277 · GHSA-j6px-jwvv-vpwq

Angular Expressions - Remote Code Execution

Priority MEDIUM 43

angular-expressions is "angular's nicest part extracted as a standalone module for the browser and node".

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02848 Published 2021-02-01 Fixed in 1.1.2 CWE-74
TI-2020-04275 CVE-2020-5219 · GHSA-hxhm-96pp-2m43

Remote Code Execution in Angular Expressions

Priority MEDIUM 43

Angular Expressions before version 1.0.1 has a remote code execution vulnerability if you call expressions.compile(userControlledInput) where userControlledInput is text that comes from user input.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02393 Published 2020-01-24 Fixed in 1.0.1 CWE-74