CVE-2021-4231

angular: XSS vulnerability

Loading…

Severity

Low

Red Hat Product Security

3.9

CVSS 3.1

Review impact separately from score.

Published · December 15, 2020

Updated · November 21, 2025

Description

A flaw was found in the angular/core package. Affected versions of this package are vulnerable to Cross-site scripting (XSS) in development, with Server-side rendering (SSR enabled).

Statement

This flaw is out of support scope for dotnet-5.0, therefore it will not be addressed in this version of dotnet. For more information, please see https://access.redhat.com/support/policy/updates/net-core.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 3.9
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L

CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')