Lucene search
+L

50 matches found

nodejs
nodejs
added 2019/05/28 5:48 p.m.26 views

Cross-Site Scripting

Overview Versions of ag-grid-community prior to 14.0.0 are vulnerable to Cross-Site Scripting XSS. Grid contents are not properly sanitized and may allow attackers to execute arbitrary JavaScript if user input is rendered in the grid. Recommendation Upgrade to version 14.0.0 or later References -...

6.7AI score
SaveExploits0Affected Software1
CNVD
CNVD
added 2018/06/15 12:00 a.m.18 views

ag-grid cross-site scripting vulnerability

ag-grid is a data grid component designed primarily for JavaScript frameworks . A cross-site scripting vulnerability exists in ag-grid. When AngularJ is used with ag-grid, a remote attacker can exploit this vulnerability to inject code with the help of Angular expressions...

6.1CVSS6AI score0.01185EPSS
SaveExploits1References1
Prion
Prion
added 2018/06/04 7:29 p.m.23 views

Cross site scripting

ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting XSS via Angular Expressions, if AngularJS is used in combination with ag-grid...

4.3CVSS5.9AI score0.01185EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2018/06/04 7:29 p.m.18 views

CVE-2017-16009

ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting XSS via Angular Expressions, if AngularJS is used in combination with ag-grid...

6.1CVSS6.2AI score
SaveExploits0References3
NVD
NVD
added 2018/06/04 7:29 p.m.25 views

CVE-2017-16009

ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting XSS via Angular Expressions, if AngularJS is used in combination with ag-grid...

6.1CVSS6AI score0.01185EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2018/06/04 7:00 p.m.33 views

CVE-2017-16009

ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting XSS via Angular Expressions, if AngularJS is used in combination with ag-grid...

5.9AI score0.01185EPSS
SaveExploits1References3
CVE
CVE
added 2018/06/04 7:00 p.m.86 views

CVE-2017-16009

The CVE-2017-16009 entry affects ag-grid when used with AngularJS, where Angular Expressions can be exploited to trigger Cross-site Scripting (XSS). The vulnerability arises from how AngularJS interacts with ag-grid, enabling injected expressions to run in the context of the page. Several connect...

6.1CVSS5.9AI score0.01185EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2018/06/04 12:00 a.m.10 views

PT-2018-6038 · Ag Grid +1 · Ag-Grid +1

Name of the Vulnerable Software and Affected Versions: ag-grid affected versions not specified Description: The issue concerns Cross-site Scripting XSS via Angular Expressions when ag-grid is used in combination with AngularJS. Recommendations: Avoid using ag-grid in combination with AngularJS...

6.1CVSS5.9AI score0.01185EPSS
SaveExploits1References8
GitLab Advisory Database
GitLab Advisory Database
added 2018/06/04 12:00 a.m.41 views

Cross-site Scripting

ag-grid is vulnerable to Cross-site Scripting XSS via Angular Expressions, if AngularJS is used in combination with ag-grid...

6.1CVSS2.8AI score0.01185EPSS
SaveExploits1References2Affected Software1
nodejs
nodejs
added 2017/03/15 6:46 p.m.69 views

XSS via Angular Expression

Overview Affected versions of ag-grid are vulnerable to Cross-site Scripting XSS via Angular Expressions, if used in combination with AngularJS. Recommendation Avoid using ag-grid in combination with AngularJS until a fix is available. References - Issue 1287 -...

4.3CVSS2.8AI score0.01185EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder