CVE catalog

CVE-2022-25869

angular.js: CVE-2022-25869

[CVE catalog]

Severity
Medium · CVSS 4.2CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Published
Source
[NVD] · [CVE record]
EPSS
7.68% · Oct 25, 2026

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting (XSS) due to insecure page caching in the Internet Explorer browser, which allows interpolation of <textarea> elements.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianangular.jssid1.8.3-3vulnerable
Debianangular.jstrixie1.8.3-3vulnerable
Debianangular.jsbookworm1.8.3-1+deb12u1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianangular.jssourcesid(unfixed)not yet assignedNot reported[1036694]
Debianangular.jssourcetrixie(unfixed)not yet assignedNot reported[1036694]
Debianangular.jssourcebookworm(unfixed)not yet assignedNot reported[1036694]

[Debian bug #1036694]

Notes

[trixie] angular.js: Minor issue, revisit when fixed upstream [bookworm] angular.js: Minor issue, revisit when fixed upstream

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libjs-angularjs]Affected

    Source package: [angular.js]

    Details (2)

    • 1.8.3-1+deb12u1 · all · bookworm

      Affected

      dsa · angular.js · debian · bookworm

    • 1.8.3-1+deb12u1 · all · bookworm

      Affected

      dsa · angular.js · debian · bookworm

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [Red Hat security advisories and VEX]