Cross-Site Scripting via JSONP

Mô tả

Tham khảo

• angular/angular.js commit 6476af8 · WEB
• npmjs.com/advisories/1630 · WEB

Lỗ hổng khác của angular

• CVE-2026-11998CAO 7.6A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrar…
• CVE-2025-0716TRUNG BÌNH 4.8Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS allows attackers to bypa…
• CVE-2024-8373TRUNG BÌNH 4.3Improper sanitization of the value of the [srcset] attribute in <source> HTML elements in AngularJS allows attackers to bypass common image …
• CVE-2024-8372TRUNG BÌNH 4.3Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which…
• CVE-2024-21490CAO 7.5This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split th…