CVE-2019-10768

7.5

HIGHCVSS v3

Published

November 19, 2019

CVSS v2

5 MEDIUM

Affected

4 projects

Assigned by

[email protected]

Severity scale

010

Description

In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload.

angular

NPMHTML enhanced for web apps

< 1.7.9OSV

@uirouter/angularjs

NPMState-based routing for AngularJS 1.x

= *, < 1.7.9NVD

@cerebral/angularjs

NPM

More on this CVE

NVD↗GitHub Advisory↗

Angularjs view for Cerebral

= *, < 1.7.9NVD

angular/angular.js

GitHubAngularJS - HTML enhanced for web apps!

= *, < 1.7.9NVD

Security Advisories

CVE-2019-10768

Description

More on this CVE