|
1 | 1 | <?xml version="1.0" encoding="UTF-8"?>
|
2 |
| -<testsuite name="auditjs.security.bower" errors="0" tests="1" package="test" id="" skipped="0" failures="1"><testcase name="angular"><failure message="Found 5 vulnerabilities. See stacktrace for details.">Details: |
| 2 | +<testsuite name="auditjs.security.bower" errors="0" tests="1" package="test" id="" skipped="0" failures="1"><testcase name="vor-test-project-bower-please-ignore-1"><failure message="Found 1 vulnerabilities. See stacktrace for details.">Details: |
3 | 3 |
|
4 | 4 | [
|
5 | 5 | {
|
6 |
| - "id": 8398878757, |
7 |
| - "title": "Cross Site Scripting (XSS) in JSONP", |
8 |
| - "description": "JSONP allows untrusted resource URLs, which provides a vector for attack by malicious actors.", |
| 6 | + "id": 8402907551, |
| 7 | + "title": "Test vulnerability, please ignore", |
| 8 | + "description": "This is a test vulnerability for a test project", |
9 | 9 | "versions": [
|
10 |
| - "<1.6.0-rc.0" |
| 10 | + "<=2.0.0" |
11 | 11 | ],
|
12 | 12 | "references": [
|
13 |
| - "https://github.com/angular/angular.js/commit/6476af83cd0418c84e034a955b12a842794385c4", |
14 |
| - "https://github.com/angular/angular.js/issues/11352" |
| 13 | + "https://vorsecurity.com/3" |
15 | 14 | ],
|
16 |
| - "published": 0, |
17 |
| - "updated": 1493261505026 |
18 |
| - }, |
19 |
| - { |
20 |
| - "id": 8399952532, |
21 |
| - "title": "Possible security hold with usemap attribute", |
22 |
| - "description": "The attribute usemap has been blacklisted as it can be used as a security exploit.", |
23 |
| - "versions": [ |
24 |
| - "<1.5.0-rc.2" |
25 |
| - ], |
26 |
| - "references": [ |
27 |
| - "https://github.com/angular/angular.js/blob/master/CHANGELOG.md#1" |
28 |
| - ], |
29 |
| - "published": 1469727878777, |
30 |
| - "updated": 1469727878777 |
31 |
| - }, |
32 |
| - { |
33 |
| - "id": 8399952533, |
34 |
| - "title": "UI Redress Attack Through Improper Sanitization Of SVG Elements", |
35 |
| - "description": "angular is susceptible to UI redress attacks. The vulnerability is due to the lack of proper sanitisation of an html input string by stripping all potentially dangerous tokens. So, an attacker can place svg elements outside of the containing element, leading to rendering it over other elements on the page (example: a login link).", |
36 |
| - "versions": [ |
37 |
| - "<1.5.0-beta.2" |
38 |
| - ], |
39 |
| - "references": [ |
40 |
| - "https://github.com/angular/angular.js/commit/181fc567d873df065f1e84af7225deb70a8d2eb9", |
41 |
| - "https://github.com/angular/angular.js/pull/12524", |
42 |
| - "https://srcclr.com/security/ui-redress-attack-through-improper/javascript/s-2252" |
43 |
| - ], |
44 |
| - "published": 1469728183493, |
45 |
| - "updated": 1469728183493 |
46 |
| - }, |
47 |
| - { |
48 |
| - "id": 8399952534, |
49 |
| - "title": "Arbitrary Code Execution", |
50 |
| - "description": "SVG animations tags are not being sanitized properly, resulting in possible arbitrary code execution.", |
51 |
| - "versions": [ |
52 |
| - "<1.5.0-beta.2" |
53 |
| - ], |
54 |
| - "references": [ |
55 |
| - "https://cwe.mitre.org/data/definitions/78.html", |
56 |
| - "https://github.com/angular/angular.js/commit/67688d5ca00f6de4c7fe6084e2fa762a00d25610", |
57 |
| - "https://github.com/angular/angular.js/pull/11290", |
58 |
| - "https://srcclr.com/security/arbitrary-code-execution-through-svg/javascript/s-2253" |
59 |
| - ], |
60 |
| - "published": 1469728274567, |
61 |
| - "updated": 1486325942923 |
62 |
| - }, |
63 |
| - { |
64 |
| - "id": 8402281303, |
65 |
| - "title": "Cross Site Scripting (XSS) through use elements referencing external SVG", |
66 |
| - "description": "> The use element can reference external svg's (same origin) and can include\nxlink javascript urls or foreign object that can execute xss.\n> \n> -- [github.com](https://github.com/angular/angular.js/pull/13453)", |
67 |
| - "versions": [ |
68 |
| - "<1.5.0" |
69 |
| - ], |
70 |
| - "references": [ |
71 |
| - "https://cwe.mitre.org/data/definitions/79.html", |
72 |
| - "https://github.com/angular/angular.js/issues/13453" |
73 |
| - ], |
74 |
| - "published": 1483077792740, |
75 |
| - "updated": 1483078107273 |
| 15 | + "published": 1493874212256, |
| 16 | + "updated": 1493874464883 |
76 | 17 | }
|
77 | 18 | ]
|
78 | 19 |
|
|
0 commit comments