GitHub Advisoryadvisory · npm

GHSA-28hp-fgcr-2r4h Cross-Site Scripting via JSONP

MEDIUM Published 2019-06-27 Modified 2021-02-24 Official page ↗

Ecosystem: npm
Packages: angular
Severity: Moderate
Weaknesses: CWE-79
Reviewed: 2019-06-27

Affected packages

• npm angular: < 1.6.0 → fixed in 1.6.0

Description

JSONP allows untrusted resource URLs, which provides a vector for attack by malicious actors.

Related

Weakness · CWE (1)

CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References