Skip to content
OpenAdvisories
Medium · 6.1 CVE-2017-16009 EUVD-2020-1346GHSA-wfw3-rgfr-6g67

XSS via Angular Expression in ag-grid

Published Jun 4, 2018 · Updated Sep 17, 2024 · Assigned by hackerone

Description

ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting (XSS) via Angular Expressions, if AngularJS is used in combination with ag-grid.

Affected products

VendorProductAffectedFixed
HackerOne ag-grid node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm ag-grid <= 18.1.3-beta.1 — GHSA-wfw3-rgfr-6g67

References