PT-2020-19701 · Google+1 · Angularjs+1

Krzysztof Kotowicz · Published 2020-06-08 · Updated 2020-10-09 · CVE-2020-7676

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions angular.js versions prior to 1.8.0

Description The issue allows cross-site scripting due to the regex-based input HTML replacement potentially turning sanitized code into unsanitized code. This can occur when <option> elements are wrapped in <select> elements, changing the parsing behavior and possibly leading to unsanitized code.

Recommendations For versions prior to 1.8.0, update to version 1.8.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of <option> elements within <select> elements to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-7676

GHSA-MHP6-PXH8-R675

RHSA-2021:0967

RHSA-2021:0968

RHSA-2021:0969

SNYK-JS-ANGULAR-570058

Affected Products

Debian

Angularjs

References · 33

• https://nvd.nist.gov/vuln/detail/CVE-2020-7676 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-7676 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-7676 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-7676 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-mhp6-pxh8-r675 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-7676 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-7676 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-7676 · Vendor Advisory
• https://github.com/angular/angular.js/pull/17028 · Note
• https://github.com/angular/angular.js/commit/2df43c07779137d1bddf7f3b282a1287a8634acd · Note
• https://github.com/angular/angular.js/pull/17028%2C · Note
• https://github.com/angular/angular.js · Note
• https://lists.apache.org/thread.html/r80f210a5f4833d59c5d3de17dd7312f9daba0765ec7d4052469f13f1%40%3Cozone-commits.hadoop.apache.org%3E · Note
• https://lists.apache.org/thread.html/r80f210a5f4833d59c5d3de17dd7312f9daba0765ec7d4052469f13f1@%3Cozone-commits.hadoop.apache.org%3E · Note
• https://lists.apache.org/thread.html/r3f05cfd587c774ea83c18e59eda9fa37fa9bbf3421484d4ee1017a20%40%3Cozone-issues.hadoop.apache.org%3E · Note