2020-01-21 23:01:29 +00:00
{
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"data_version" : "4.0" ,
"CVE_data_meta" : {
"ID" : "CVE-2020-7676" ,
2020-06-08 14:01:20 +00:00
"ASSIGNER" : "report@snyk.io" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "n/a" ,
"product" : {
"product_data" : [
{
"product_name" : "angular.js" ,
"version" : {
"version_data" : [
{
"version_value" : "All versions prior to 1.8.0"
}
]
}
}
]
}
}
]
}
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "Cross-site Scripting"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"refsource" : "MISC" ,
"name" : "https://github.com/angular/angular.js/pull/17028," ,
"url" : "https://github.com/angular/angular.js/pull/17028,"
} ,
{
"refsource" : "MISC" ,
"name" : "https://snyk.io/vuln/SNYK-JS-ANGULAR-570058" ,
"url" : "https://snyk.io/vuln/SNYK-JS-ANGULAR-570058"
2020-10-01 00:01:41 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[nifi-commits] 20200930 svn commit: r1882168 - /nifi/site/trunk/security.html" ,
"url" : "https://lists.apache.org/thread.html/rda99599896c3667f2cc9e9d34c7b6ef5d2bbed1f4801e1d75a2b0679@%3Ccommits.nifi.apache.org%3E"
2020-10-07 02:01:35 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[hadoop-ozone-issues] 20201006 [jira] [Updated] (HDDS-4316) Upgrade to angular 1.8.0 due to CVE-2020-7676" ,
"url" : "https://lists.apache.org/thread.html/r3f05cfd587c774ea83c18e59eda9fa37fa9bbf3421484d4ee1017a20@%3Cozone-issues.hadoop.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[hadoop-ozone-issues] 20201006 [GitHub] [hadoop-ozone] vivekratnavel opened a new pull request #1481: HDDS-4316. Upgrade to angular 1.8.0 due to CVE-2020-7676" ,
"url" : "https://lists.apache.org/thread.html/r57383582dcad2305430321589dfaca6793f5174c55da6ce8d06fbf9b@%3Cozone-issues.hadoop.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[hadoop-ozone-issues] 20201006 [jira] [Created] (HDDS-4316) Upgrade to angular 1.8.0 due to CVE-2020-7676" ,
"url" : "https://lists.apache.org/thread.html/r198985c02829ba8285ed4f9b1de54a33b5f31b08bb38ac51fc86961b@%3Cozone-issues.hadoop.apache.org%3E"
2020-10-07 05:01:34 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[hadoop-ozone-issues] 20201006 [GitHub] [hadoop-ozone] dineshchitlangia commented on a change in pull request #1481: HDDS-4316. Upgrade to angular 1.8.0 due to CVE-2020-7676" ,
"url" : "https://lists.apache.org/thread.html/r79e3feaaf87b81e80da0e17a579015f6dcb94c95551ced398d50c8d7@%3Cozone-issues.hadoop.apache.org%3E"
2020-10-07 07:01:34 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[hadoop-ozone-issues] 20201007 [GitHub] [hadoop-ozone] vivekratnavel commented on pull request #1481: HDDS-4316. Upgrade to angular 1.8.0 due to CVE-2020-7676" ,
"url" : "https://lists.apache.org/thread.html/r455ebd83a1c69ae8fd897560534a079c70a483dbe1e75504f1ca499b@%3Cozone-issues.hadoop.apache.org%3E"
2020-10-08 20:01:49 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[hadoop-ozone-issues] 20201008 [jira] [Updated] (HDDS-4316) Upgrade to angular 1.8.0 due to CVE-2020-7676" ,
"url" : "https://lists.apache.org/thread.html/rb6423268b25db0f800359986867648e11dbd38e133b9383e85067f02@%3Cozone-issues.hadoop.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[hadoop-ozone-commits] 20201008 [hadoop-ozone] branch master updated: HDDS-4316. Upgrade to angular 1.8.0 due to CVE-2020-7676 (#1481)" ,
"url" : "https://lists.apache.org/thread.html/r80f210a5f4833d59c5d3de17dd7312f9daba0765ec7d4052469f13f1@%3Cozone-commits.hadoop.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[hadoop-ozone-issues] 20201008 [GitHub] [hadoop-ozone] adoroszlai merged pull request #1481: HDDS-4316. Upgrade to angular 1.8.0 due to CVE-2020-7676" ,
"url" : "https://lists.apache.org/thread.html/r446c297cd6cda2bd7e345c9b0741d7f611df89902e5d515848c6f4b1@%3Cozone-issues.hadoop.apache.org%3E"
2020-10-09 16:01:37 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[hadoop-ozone-issues] 20201009 [GitHub] [hadoop-ozone] adoroszlai merged pull request #1481: HDDS-4316. Upgrade to angular 1.8.0 due to CVE-2020-7676" ,
"url" : "https://lists.apache.org/thread.html/rfa2b19d01d10a8637dc319a7d5994c3dbdb88c0a8f9a21533403577a@%3Cozone-issues.hadoop.apache.org%3E"
2020-06-08 14:01:20 +00:00
}
]
2020-01-21 23:01:29 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2020-06-08 14:01:20 +00:00
"value" : "angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping \"<option>\" elements in \"<select>\" ones changes parsing behavior, leading to possibly unsanitizing code."
2020-01-21 23:01:29 +00:00
}
]
}
}
