Name: CVE-2021-4231: Improper Neutralization of Input During Web Page Generation
Creator: Rapid7
Published: 2022-05-26T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-4231, CWE-79, CVSS 3.5, EPSS 0.01341

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to version 11.0.5 and 11.1.0-next.3 is able to address this issue. The name of the patch is ba8da742e3b243e8f43d4c63aa842b44e14f2b09. It is recommended to upgrade the affected component.

CVSS Details

CVSS 3.1 Base Score: 3.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade librados-develUpgrade python3-ceph-argparseUpgrade ceph-fuse-debuginfoUpgrade libcephfs-develUpgrade librgw-develUpgrade ceph-mibUpgrade librgw2Upgrade librgw2-debuginfoUpgrade python3-rgwUpgrade python3-rbdUpgrade ceph-debuginfoUpgrade ceph-resource-agentsUpgrade rbd-nbdUpgrade python3-cephfsUpgrade ceph-base-debuginfoUpgrade ceph-mgr-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-baseUpgrade ceph-debugsourceUpgrade python3-rgw-debuginfoUpgrade libradospp-develUpgrade python3-rados-debuginfoUpgrade libradosstriper1-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-commonUpgrade libcephsqlite-debuginfoUpgrade libcephfs2Upgrade ceph-selinuxUpgrade rbd-nbd-debuginfoUpgrade librados-devel-debuginfoUpgrade ceph-common-debuginfoUpgrade rbd-fuse-debuginfoUpgrade librbd-develUpgrade cephadmUpgrade ansible-collection-ansible-posixUpgrade python3-radosUpgrade ceph-osd-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade python3-rbd-debuginfoUpgrade python3-cephfs-debuginfoUpgrade ceph-immutable-object-cacheUpgrade rbd-mirror-debuginfoUpgrade ceph-exporter-debuginfoUpgrade cephfs-topUpgrade libradosstriper1Upgrade cephfs-mirror-debuginfoUpgrade libcephfs2-debuginfoUpgrade cephadm-ansibleUpgrade ceph-fuseUpgrade python3-ceph-commonUpgrade ceph-mds-debuginfoUpgrade ceph-radosgw-debuginfo	Jun 16, 2023	May 26, 2022
Redhat_linux	—	Upgrade ceph-selinuxUpgrade cephadmUpgrade ceph-mon-debuginfoUpgrade ceph-exporter-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-debugsourceUpgrade python3-cephfsUpgrade python3-ceph-argparseUpgrade ceph-base-debuginfoNo solution existsUpgrade ceph-mibUpgrade ceph-radosgw-debuginfoUpgrade python3-rbdUpgrade cephfs-topUpgrade ceph-osd-debuginfoUpgrade ceph-baseUpgrade python3-rgwUpgrade ceph-mgr-debuginfoUpgrade python3-cephfs-debuginfoUpgrade python3-rgw-debuginfoUpgrade python3-rados-debuginfoUpgrade ceph-fuseUpgrade cephadm-ansibleUpgrade libradosstriper1Upgrade rbd-mirror-debuginfoUpgrade libradospp-develUpgrade ceph-resource-agentsUpgrade librbd-develUpgrade librgw2Upgrade ceph-immutable-object-cache-debuginfoUpgrade python3-ceph-commonUpgrade librgw-develUpgrade cephfs-mirror-debuginfoUpgrade ceph-commonUpgrade libradosstriper1-debuginfoUpgrade ceph-debuginfoUpgrade ceph-immutable-object-cacheUpgrade rbd-nbdUpgrade ceph-mds-debuginfoUpgrade libcephsqlite-debuginfoUpgrade librgw2-debuginfoUpgrade ansible-collection-ansible-posixUpgrade rbd-nbd-debuginfoUpgrade librados-devel-debuginfoUpgrade rbd-fuse-debuginfoUpgrade libcephfs2Upgrade python3-radosUpgrade python3-rbd-debuginfoUpgrade libcephfs-develUpgrade libcephfs2-debuginfoUpgrade librados-develUpgrade ceph-fuse-debuginfo	Jun 16, 2023	May 26, 2022

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence