vulnerability

F5 Networks: CVE-2023-26118: K000141463: Multiple Angular JS vulnerabilities CVE-2019-10768, CVE-2023-26116, CVE-2023-26117, and CVE-2023-26118

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
5	(AV:N/AC:L/Au:N/C:N/I:P/A:N)	Nov 19, 2019	Nov 11, 2024	Apr 22, 2025

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:P/A:N)

Published

Nov 19, 2019

Added

Nov 11, 2024

Modified

Apr 22, 2025

Description

In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload.

Solution

f5-big-ip-upgrade-latest

References

CVE-2019-10768
https://attackerkb.com/topics/CVE-2019-10768
CVE-2023-26116
https://attackerkb.com/topics/CVE-2023-26116
CVE-2023-26117
https://attackerkb.com/topics/CVE-2023-26117
CVE-2023-26118
https://attackerkb.com/topics/CVE-2023-26118
URL-https://my.f5.com/manage/s/article/K000141463

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today