CVE-2021-4231

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to version 11.0.5 and 11.1.0-next.3 is able to address this issue. The name of the patch is ba8da742e3b243e8f43d4c63aa842b44e14f2b09. It is recommended to upgrade the affected component.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
May 26, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-423109.8Microsoft Defender for IoT Remote Code Execution VulnerabilityCVE-2021-4231110.0Microsoft Defender for IoT Remote Code Execution VulnerabilityCVE-2021-423127.8Microsoft Defender for IoT Elevation of Privilege VulnerabilityCVE-2021-4231310.0Microsoft Defender for IoT Remote Code Execution VulnerabilityCVE-2021-423148.8Microsoft Defender for IoT Remote Code Execution VulnerabilityCVE-2021-423158.8Microsoft Defender for IoT Remote Code Execution VulnerabilityCVE-2021-423168.8Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityCVE-2021-423194.7Visual Studio Elevation of Privilege VulnerabilityCVE-2021-42326.1A vulnerability classified as problematic has been found in Zoo Management System 1.0. Affected is an unknown function of the file admin/manCVE-2021-423205.7Microsoft SharePoint Server Spoofing VulnerabilityCVE-2021-423218.8Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-423227.8Visual Studio Code Elevation of Privilege Vulnerability
CVE-2021-4231: Medium severity, CVSS 5.4 | Vulnix