Name: CVE-2021-4231: Improper Neutralization of Input During Web Page Generation
Creator: Rapid7
Published: 2022-05-26T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-4231, CWE-79, CVSS 3.5, EPSS 0.01341

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to version 11.0.5 and 11.1.0-next.3 is able to address this issue. The name of the patch is ba8da742e3b243e8f43d4c63aa842b44e14f2b09. It is recommended to upgrade the affected component.

CVSS Details

CVSS 3.1 Base Score: 3.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade libradospp-develUpgrade ceph-baseUpgrade python3-cephfsUpgrade python3-rgw-debuginfoUpgrade libcephfs2Upgrade libradosstriper1-debuginfoUpgrade libcephsqlite-debuginfoUpgrade rbd-nbd-debuginfoUpgrade librgw-develUpgrade librgw2Upgrade python3-rados-debuginfoUpgrade ceph-fuse-debuginfoUpgrade ceph-commonUpgrade librados-develUpgrade python3-ceph-argparseUpgrade librados-devel-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-test-debuginfoUpgrade rbd-nbdUpgrade librgw2-debuginfoUpgrade ceph-resource-agentsUpgrade libcephfs-develUpgrade python3-rgwUpgrade ceph-debuginfoUpgrade ceph-selinuxUpgrade ceph-mgr-debuginfoUpgrade ceph-base-debuginfoUpgrade ceph-mibUpgrade python3-rbdUpgrade ceph-debugsourceUpgrade ceph-immutable-object-cache-debuginfoUpgrade rbd-mirror-debuginfoUpgrade ceph-exporter-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade libcephfs2-debuginfoUpgrade ceph-fuseUpgrade cephfs-topUpgrade libradosstriper1Upgrade ceph-osd-debuginfoUpgrade cephadm-ansibleUpgrade cephfs-mirror-debuginfoUpgrade ceph-common-debuginfoUpgrade python3-cephfs-debuginfoUpgrade ceph-immutable-object-cacheUpgrade ansible-collection-ansible-posixUpgrade librbd-develUpgrade cephadmUpgrade rbd-fuse-debuginfoUpgrade python3-rbd-debuginfoUpgrade python3-radosUpgrade python3-ceph-commonUpgrade ceph-mds-debuginfo	Jun 16, 2023	May 26, 2022
Redhat_linux	—	Upgrade ceph-base-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-osd-debuginfoUpgrade python3-cephfsNo solution existsUpgrade libradosstriper1Upgrade cephfs-topUpgrade cephadm-ansibleUpgrade ceph-baseUpgrade ceph-selinuxUpgrade ceph-resource-agentsUpgrade python3-ceph-argparseUpgrade ceph-mgr-debuginfoUpgrade ceph-exporter-debuginfoUpgrade ceph-debugsourceUpgrade ceph-radosgw-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-test-debuginfoUpgrade cephadmUpgrade librgw2Upgrade python3-rbdUpgrade python3-rados-debuginfoUpgrade rbd-mirror-debuginfoUpgrade python3-cephfs-debuginfoUpgrade libradospp-develUpgrade ceph-fuseUpgrade python3-rgw-debuginfoUpgrade librbd-develUpgrade python3-rgwUpgrade ceph-mibUpgrade librados-develUpgrade ceph-immutable-object-cacheUpgrade librgw-develUpgrade python3-ceph-commonUpgrade rbd-nbdUpgrade libradosstriper1-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade librados-devel-debuginfoUpgrade python3-rbd-debuginfoUpgrade python3-radosUpgrade libcephfs2Upgrade ansible-collection-ansible-posixUpgrade libcephsqlite-debuginfoUpgrade ceph-commonUpgrade cephfs-mirror-debuginfoUpgrade rbd-nbd-debuginfoUpgrade libcephfs2-debuginfoUpgrade ceph-debuginfoUpgrade ceph-fuse-debuginfoUpgrade libcephfs-develUpgrade rbd-fuse-debuginfoUpgrade ceph-mds-debuginfo	Jun 16, 2023	May 26, 2022

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business