Unvalidated Data Delivery Vulnerability in Angular Versions Before 1.5.0-beta.0

CVE-2019-14863 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.

Learn more about our Web App Pen Testing.