CVE-2017-16009

ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting (XSS) via Angular Expressions, if AngularJS is used in combination with ag-grid.

• CWE-79
• CWE-79

• https://github.com/ceolter/ag-grid/issues/1287Issue Tracking, Third Party Advisory
• https://nodesecurity.io/advisories/327Broken Link, Third Party Advisory
• https://spring.io/blog/2016/01/28/angularjs-escaping-the-expression-sandbox-for-xssExploit, Technical Description, Third Party Advisory
• https://github.com/ceolter/ag-grid/issues/1287Issue Tracking, Third Party Advisory
• https://nodesecurity.io/advisories/327Broken Link, Third Party Advisory
• https://spring.io/blog/2016/01/28/angularjs-escaping-the-expression-sandbox-for-xssExploit, Technical Description, Third Party Advisory

Published

Jun 4, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16001In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmwar…
• CVE-2017-16003windows-build-tools is a module for installing C++ Build Too…
• CVE-2017-16005Http-signature is a "Reference implementation of Joyent's HT…
• CVE-2017-16006Remarkable is a markdown parser. In versions 1.6.2 and lower…
• CVE-2017-16007node-jose is a JavaScript implementation of the JSON Object …
• CVE-2017-16008i18next is a language translation framework. Because of how …
• CVE-2017-1601IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 …
• CVE-2017-16010i18next is a language translation framework. When using the …
• CVE-2017-16011Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-16012Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-16013hapi is a web and services application framework. When hapi …
• CVE-2017-16014Http-proxy is a proxying library. Because of the way errors …7.5