Количество 4
Количество 4
CVE-2025-66412
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.
CVE-2025-66412
Angular is a development platform for building mobile and desktop web ...
GHSA-v4hv-rgfq-gp49
Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes
BDU:2025-15561
Уязвимость компилятора шаблонов среды проектирования приложений и платформы разработки одностраничных приложений Аngular, позволяющая нарушителю проводить межсайтовые сценарные атаки
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-66412 Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17. | 0% Низкий | 17 дней назад | |
| CVE-2025-66412 Angular is a development platform for building mobile and desktop web ... | 0% Низкий | 17 дней назад | |
| GHSA-v4hv-rgfq-gp49 Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes | 0% Низкий | 17 дней назад | |
 | BDU:2025-15561 Уязвимость компилятора шаблонов среды проектирования приложений и платформы разработки одностраничных приложений Аngular, позволяющая нарушителю проводить межсайтовые сценарные атаки | CVSS3: 8 | 0% Низкий | 18 дней назад |
Уязвимостей на страницу