WS-2017-0119 | Mend Vulnerability Database

Vulnerability DatabaseWS-2017-0119

WS-2017-0119

Published:May 19, 2026

Updated:May 19, 2026

Affected versions of the package are vulnerable to Clickjacking.

Affected Packages

angular (BOWER):

Affected version(s) =v1.4.6 <v1.4.7-build.4242+sha.4dd10fd

Fix Suggestion:

Update to version v1.4.7-build.4242+sha.4dd10fd

angular (BOWER):

Affected version(s) =v1.3.20 <v1.3.21-build.153+sha.a9ecde1

Fix Suggestion:

Update to version v1.3.21-build.153+sha.a9ecde1

angular (BOWER):

Affected version(s) =v1.4.5 <v1.4.6-build.4194+sha.170cd96

Fix Suggestion:

Update to version v1.4.6-build.4194+sha.170cd96

angular (BOWER):

Affected version(s) =v1.4.14 <v1.5.0-beta.0

Fix Suggestion:

Update to version v1.5.0-beta.0

angular (BOWER):

Affected version(s) =v1.4.8 <v1.4.9-build.1+sha.7882c1c

Fix Suggestion:

Update to version v1.4.9-build.1+sha.7882c1c

angular (BOWER):

Affected version(s) =v1.3.15 <v1.3.16-build.100+sha.d5c99ea

Fix Suggestion:

Update to version v1.3.16-build.100+sha.d5c99ea

angular (BOWER):

Affected version(s) =v1.4.3 <v1.4.4-build.4102+sha.528ceda

Fix Suggestion:

Update to version v1.4.4-build.4102+sha.528ceda

angular (BOWER):

Affected version(s) =v1.3.2 <v1.3.3-build.3534+sha.b6fd184

Fix Suggestion:

Update to version v1.3.3-build.3534+sha.b6fd184

angular (BOWER):

Affected version(s) =v1.3.9 <v1.3.10-build.17+sha.bf55d76

Fix Suggestion:

Update to version v1.3.10-build.17+sha.bf55d76

angular (BOWER):

Affected version(s) =v1.4.10 <v1.4.11

Fix Suggestion:

Update to version v1.4.11

angular (BOWER):

Affected version(s) =v1.3.17 <v1.3.18-build.129+sha.8bd59a5

Fix Suggestion:

Update to version v1.3.18-build.129+sha.8bd59a5

angular (NPM):

Affected version(s) >=1.3.1 <1.5.0

Fix Suggestion:

Update to version 1.5.0

westwind.globalization.web (NUGET):

Affected version(s) =2.0.4-beta1 <2.0.10-beta2

Fix Suggestion:

Update to version 2.0.10-beta2

vs2015.taco.angularoncordova.bootstrap (NUGET):

Affected version(s) =1.0.0 <1.0.1

Fix Suggestion:

Update to version 1.0.1

ionicvs2015 (NUGET):

Affected version(s) >=0.3.0 <=1.1.0

Fix Suggestion:

Update to version no_fix

angularjstypescriptbase (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

angularjs (NUGET):

Affected version(s) =1.2.10 <1.2.11

Fix Suggestion:

Update to version 1.2.11

westwind.globalization.web (NUGET):

Affected version(s) =2.0.60 <2.0.61

Fix Suggestion:

Update to version 2.0.61

fion.modelerp.core (NUGET):

Affected version(s) >=1.0.0 <1.0.344

Fix Suggestion:

Update to version 1.0.344

iii.web.core (NUGET):

Affected version(s) >=1.0.0 <=1.0.7

Fix Suggestion:

Update to version no_fix

rota.spa (NUGET):

Affected version(s) >=1.0.0 <=1.5.6

Fix Suggestion:

Update to version no_fix

crashdiag (NUGET):

Affected version(s) >=1.3.0.1 <=1.3.0.3

Fix Suggestion:

Update to version no_fix

angularjs (NUGET):

Affected version(s) >=1.2.27 <1.3.0-beta1

Fix Suggestion:

Update to version 1.3.0-beta1

bike.net.modules.angular (NUGET):

Affected version(s) =0.0.0.8-alfa

Fix Suggestion:

Update to version no_fix

angularjs (NUGET):

Affected version(s) >=1.3.0-rc5 <1.3.0.10-beta

Fix Suggestion:

Update to version 1.3.0.10-beta

westwind.globalization.web (NUGET):

Affected version(s) >=2.0.20-beta5 <2.0.50

Fix Suggestion:

Update to version 2.0.50

consorzimvc (NUGET):

Affected version(s) =2.0.0

Fix Suggestion:

Update to version no_fix

ionic-framework-vs2015 (NUGET):

Affected version(s) >=0.1.0 <=0.2.0

Fix Suggestion:

Update to version no_fix

angularjs.sanitize (NUGET):

Affected version(s) >=1.3.0 <1.5.0

Fix Suggestion:

Update to version 1.5.0

crash.diagnoser (NUGET):

Affected version(s) =1.3.0.1

Fix Suggestion:

Update to version no_fix

angularjs.sanitize (NUGET):

Affected version(s) =1.2.10 <1.2.11

Fix Suggestion:

Update to version 1.2.11

mytestpackagedyrrahitis (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

angularjs.sanitize (NUGET):

Affected version(s) >=1.2.27 <1.3.0-beta14

Fix Suggestion:

Update to version 1.3.0-beta14

adjustmentapp (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

angularjs (NUGET):

Affected version(s) >=1.3.1 <1.5.0

Fix Suggestion:

Update to version 1.5.0

westwind.globalization.web (NUGET):

Affected version(s) =2.2.0 <2.2.1

Fix Suggestion:

Update to version 2.2.1

aspspasilo-gh (NUGET):

Affected version(s) >=1.2.0 <=1.2.2

Fix Suggestion:

Update to version no_fix

claroline/front-end-bundle (PHP):

Affected version(s) =dev-7.x-test <7.0.1

Fix Suggestion:

Update to version 7.0.1

victoire/victoire (PHP):

Affected version(s) =2.2.x-dev <2.2.1

Fix Suggestion:

Update to version 2.2.1

claroline/front-end-bundle (PHP):

Affected version(s) =dev-master <dev-update_daterangepicker

Fix Suggestion:

Update to version dev-update_daterangepicker

matomo/matomo (PHP):

Affected version(s) >=2.11.0-b4 <2.15.1-b10

Fix Suggestion:

Update to version 2.15.1-b10

matomo/matomo (PHP):

Affected version(s) >=3.0.1 <3.1.1

Fix Suggestion:

Update to version 3.1.1

my-oos/my-oos (PHP):

Affected version(s) >=v2.0.36 <v2.0.56

Fix Suggestion:

Update to version v2.0.56

acosf/archersys (PHP):

Affected version(s) >=dev-hdddwinstudent <1.0

Fix Suggestion:

Update to version 1.0

victoire/victoire (PHP):

Affected version(s) =dev-fix/translation <dev-master

Fix Suggestion:

Update to version dev-master

aryaduta/metronic-bundle (PHP):

Affected version(s) =1.2.2

Fix Suggestion:

Update to version no_fix

newscoop/scoopwriter (PHP):

Affected version(s) >=1.0.0-beta.4 <v1.0.0

Fix Suggestion:

Update to version v1.0.0

newscoop/scoopwriter (PHP):

Affected version(s) =1.2.0 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

tortuvshin/bella.mn (PHP):

Affected version(s) >=dev-core <v1.0.0

Fix Suggestion:

Update to version v1.0.0

victoire/victoire (PHP):

Affected version(s) =dev-remove-swiftmailer-dependancy <dev-dependabot/npm_and_yarn/Bundle/UIBundle/Resources/config/marked-0.3.19

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/Bundle/UIBundle/Resources/config/marked-0.3.19

mpl/matomo (PHP):

Affected version(s) >=2.11.0 <3.1.1

Fix Suggestion:

Update to version 3.1.1

salimkamboh/yii2-angularjs (PHP):

Affected version(s) >=dev-main <=1.0

Fix Suggestion:

Update to version no_fix

chayka/core-wpp (PHP):

Affected version(s) >=dev-dev <=dev-master

Fix Suggestion:

Update to version no_fix

newscoop/article-edit-screen (PHP):

Affected version(s) =1.1.0 <v1.1

Fix Suggestion:

Update to version v1.1

piwik/piwik (PHP):

Affected version(s) =dev-poc_manage_apps <dev-prefix-monolog-syslog

Fix Suggestion:

Update to version dev-prefix-monolog-syslog

vjcspy/izadmin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

betteryourweb/laravel-custom (PHP):

Affected version(s) =dev-master <v3.0.0-beta-2

Fix Suggestion:

Update to version v3.0.0-beta-2

newscoop/scoopwriter (PHP):

Affected version(s) =dev-master <1.0.0-alpha1

Fix Suggestion:

Update to version 1.0.0-alpha1

coolops/web-app (PHP):

Affected version(s) =dev-master <3.0.0-RC1

Fix Suggestion:

Update to version 3.0.0-RC1

newscoop/article-edit-screen (PHP):

Affected version(s) =1.0.0-beta.11 <v1.0.0-beta.11

Fix Suggestion:

Update to version v1.0.0-beta.11

newscoop/article-edit-screen (PHP):

Affected version(s) =1.2.0 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

someline/someline-starter (PHP):

Affected version(s) =v0.8.2

Fix Suggestion:

Update to version no_fix

innova/angular-js-bundle (PHP):

Affected version(s) >=5.0.0 <=5.1.0

Fix Suggestion:

Update to version no_fix

coolops/web-app (PHP):

Affected version(s) >=3.2.0 <=3.2.2

Fix Suggestion:

Update to version no_fix

matomo/matomo (PHP):

Affected version(s) =dev-poc_manage_apps <dev-prefix-monolog-syslog

Fix Suggestion:

Update to version dev-prefix-monolog-syslog

singular/singular-project (PHP):

Affected version(s) =dev-1.x-dev <2.0.0

Fix Suggestion:

Update to version 2.0.0

titan-framework/sample-travel (PHP):

Affected version(s) >=dev-master <=1.16.09-p5

Fix Suggestion:

Update to version no_fix

matomo/matomo (PHP):

Affected version(s) =dev-2.x-dev <dev-angular-migration2

Fix Suggestion:

Update to version dev-angular-migration2

panda-coder/phpanda (PHP):

Affected version(s) =dev-master <dev-oldMaster

Fix Suggestion:

Update to version dev-oldMaster

piwik/piwik (PHP):

Affected version(s) =dev-2.x-dev <dev-angular-migration2

Fix Suggestion:

Update to version dev-angular-migration2

newscoop/article-edit-screen (PHP):

Affected version(s) >=1.0.0-beta.4 <v1.0.0

Fix Suggestion:

Update to version v1.0.0

folivoro/layotter (PHP):

Affected version(s) >=dev-master <=v1.5.29

Fix Suggestion:

Update to version no_fix

innova/angular-js-bundle (PHP):

Affected version(s) =2.0.0 <2.0.1

Fix Suggestion:

Update to version 2.0.1

deesoft/yii2-angular (PHP):

Affected version(s) =1.0.0 <1.1

Fix Suggestion:

Update to version 1.1

icap/portfolio-bundle (PHP):

Affected version(s) >=v1.0.0 <4.0.0

Fix Suggestion:

Update to version 4.0.0

sagsoz06/adminlte-theme (PHP):

Affected version(s) >=dev-master <=2.1.9

Fix Suggestion:

Update to version no_fix

ewinslow/elgg-evan (PHP):

Affected version(s) =dev-master <1.1

Fix Suggestion:

Update to version 1.1

boson/portal-bundle (PHP):

Affected version(s) =dev-b2.7

Fix Suggestion:

Update to version no_fix

betteryourweb/laravel-custom (PHP):

Affected version(s) =dev-dev-master <dev-develop

Fix Suggestion:

Update to version dev-develop

siddthartha/yii2-angular (PHP):

Affected version(s) =1.0.0 <1.1

Fix Suggestion:

Update to version 1.1

davbfr/cf (PHP):

Affected version(s) >=2.0 <2.5

Fix Suggestion:

Update to version 2.5

newscoop/article-edit-screen (PHP):

Affected version(s) =1.0.1 <v1.0.1

Fix Suggestion:

Update to version v1.0.1

innova/angularjs (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

someline/someline-starter-app (PHP):

Affected version(s) >=dev-master <=v1.0.2

Fix Suggestion:

Update to version no_fix

sunra/angularjs-symfony2-bundle (PHP):

Affected version(s) >=dev-master <=v1.5.5

Fix Suggestion:

Update to version no_fix

newscoop/scoopwriter (PHP):

Affected version(s) =1.0.0-beta.11 <v1.0.0-beta.11

Fix Suggestion:

Update to version v1.0.0-beta.11

components/angular.js (PHP):

Affected version(s) =dev-master <1.2.0

Fix Suggestion:

Update to version 1.2.0

davbfr/cf (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

chaplean/cms-bundle (PHP):

Affected version(s) >=dev-dev <=v8.0.3

Fix Suggestion:

Update to version no_fix

hingst/layotter (PHP):

Affected version(s) >=dev-dev <=v1.5.27

Fix Suggestion:

Update to version no_fix

nehakadam/calenstyle (PHP):

Affected version(s) =2.0.7

Fix Suggestion:

Update to version no_fix

newscoop/scoopwriter (PHP):

Affected version(s) =1.1.0 <v1.1

Fix Suggestion:

Update to version v1.1

innova/angular-js-bundle (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

webkid/cms (PHP):

Affected version(s) >=0.1.0 <0.1.6

Fix Suggestion:

Update to version 0.1.6

newscoop/article-edit-screen (PHP):

Affected version(s) =dev-master <1.0.0-alpha1

Fix Suggestion:

Update to version 1.0.0-alpha1

rogerclotet/angularjsbundle (PHP):

Affected version(s) =1.0.3 <1.0.4

Fix Suggestion:

Update to version 1.0.4

matomo/matomo (PHP):

Affected version(s) >=2.15.1-b11 <dev-3.x-dev

Fix Suggestion:

Update to version dev-3.x-dev

piwik/piwik (PHP):

Affected version(s) >=2.11.0-rc1 <2.11.0-b2

Fix Suggestion:

Update to version 2.11.0-b2

piwik/piwik (PHP):

Affected version(s) >=3.0.1 <3.1.1

Fix Suggestion:

Update to version 3.1.1

davbfr/cf (PHP):

Affected version(s) =2.6 <2.7

Fix Suggestion:

Update to version 2.7

matomo/matomo (PHP):

Affected version(s) >=2.11.0-rc1 <2.11.0-b2

Fix Suggestion:

Update to version 2.11.0-b2

someline/someline-starter (PHP):

Affected version(s) =dev-master <v0.0.1

Fix Suggestion:

Update to version v0.0.1

piwik/piwik (PHP):

Affected version(s) >=2.11.0-b4 <dev-3.x-dev

Fix Suggestion:

Update to version dev-3.x-dev

renatomefidf/sammui (PHP):

Affected version(s) >=v0.0.1 <v0.0.3

Fix Suggestion:

Update to version v0.0.3

singular/singular-project (PHP):

Affected version(s) >=v2.0 <dev-dev-2.1

Fix Suggestion:

Update to version dev-dev-2.1

newscoop/scoopwriter (PHP):

Affected version(s) =1.0.1 <v1.0.1

Fix Suggestion:

Update to version v1.0.1

xrow/xrowpiwik-ls (PHP):

Affected version(s) >=1.1 <1.3.0

Fix Suggestion:

Update to version 1.3.0

clh021/yii2-wechat_ionic1 (PHP):

Affected version(s) >=dev-master <=0.0.1

Fix Suggestion:

Update to version no_fix

opensmarty/opensmarty-starter (PHP):

Affected version(s) >=dev-master <=v1.0.0

Fix Suggestion:

Update to version no_fix

Related Resources (2)

https://github.com/angular/angular.js/pull/12524

https://github.com/angular/angular.js/commit/181fc567d873df065f1e84af7225deb70a8d2eb9

Do you need more information?

CVSS v4

Base Score:

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

PASSIVE

Vulnerable System Confidentiality

HIGH

Vulnerable System Integrity

NONE

Vulnerable System Availability

NONE

Subsequent System Confidentiality

HIGH

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

7.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE