Lucene search
+L

24 matches found

Cvelist
Cvelist
•added 2021/02/01 3:05 p.m.•42 views

CVE-2021-21277 Angular Expressions - Remote Code Execution

angular-expressions is "angular's nicest part extracted as a standalone module for the browser and node". In angular-expressions before version 1.1.2 there is a vulnerability which allows Remote Code Execution if you call "expressions.compileuserControlledInput" where "userControlledInput" is tex...

8.5CVSS9.1AI score0.0273EPSS
SaveExploits0References4
NVD
NVD
•added 2020/01/24 4:15 p.m.•27 views

CVE-2020-5219

Angular Expressions before version 1.0.1 has a remote code execution vulnerability if you call expressions.compileuserControlledInput where userControlledInput is text that comes from user input. If running angular-expressions in the browser, an attacker could run any browser script when the...

8.8CVSS9AI score0.02393EPSS
SaveExploits0References3
OSV
OSV
•added 2020/01/24 4:15 p.m.•18 views

CVE-2020-5219

Angular Expressions before version 1.0.1 has a remote code execution vulnerability if you call expressions.compileuserControlledInput where userControlledInput is text that comes from user input. If running angular-expressions in the browser, an attacker could run any browser script when the...

8.8CVSS8AI score
SaveExploits0References3
Prion
Prion
•added 2020/01/24 4:15 p.m.•27 views

Remote code execution

Angular Expressions before version 1.0.1 has a remote code execution vulnerability if you call expressions.compileuserControlledInput where userControlledInput is text that comes from user input. If running angular-expressions in the browser, an attacker could run any browser script when the...

6.8CVSS9AI score0.02393EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder