npm/ag-grid CVE-2017-16009: medium 6.1, EPSS 1.02%
XSS via Angular Expression in ag-grid
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 18.1.3-beta.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-wfw3-rgfr-6g67
- https://nvd.nist.gov/vuln/detail/CVE-2017-16009
- https://github.com/ceolter/ag-grid/issues/1287
- https://github.com/ag-grid/ag-grid
- https://spring.io/blog/2016/01/28/angularjs-escaping-the-expression-sandbox-for-xss
CVE-2017-16009 · published · modified · JSON