AngularJS 安全漏洞(CVE-2022-25844)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-25844
• https://www.cve.org/CVERecord?id=CVE-2022-25844
• https://www.sentinelone.com/vulnerability-database/cve-2022-25844/
• https://www.openlogic.com/blog/angularjs-cve-2022-25844
• https://www.herodevs.com/vulnerability-directory/cve-2022-25844
• https://security.snyk.io/vuln/SNYK-JS-ANGULAR-2772735
• https://access.redhat.com/security/cve/cve-2022-25844
• https://github.com/advisories/GHSA-m2h2-264f-f486
• https://www.miggo.io/vulnerability-database/cve/CVE-2022-25844
• https://app.opencve.io/cve/CVE-2022-25844

Related Vulnerabilities

• PoCCVE-2021-41174: Grafana 8.0.0 <= v.8.2.2 - Angularjs Rendering Cross-Site Scripting
• PoCCVE-2024-42640: Angular-Base64-Upload - Remote Code Execution
• PoCangular-client-side-template-injection: Angular Client-side-template-injection
• PoCancestrycdn-angular-csp-bypass: Content-Security-Policy Bypass - AncestryCDN Angular
• PoCangularjs-code-csp-bypass: Content-Security-Policy Bypass - AngularJS Code
• PoCgstatic-angular-csp-bypass: Content-Security-Policy Bypass - GStatic Angular
• PoCst-angular-csp-bypass: Content-Security-Policy Bypass - ST Angular
• PoCyastat-angular-csp-bypass: Content-Security-Policy Bypass - Yastat Angular
• PoCyastatic-angular-csp-bypass: Content-Security-Policy Bypass - Yastatic Angular
• PoCyuedust-angular-csp-bypass: Content-Security-Policy Bypass - Yuedust Angular
• （CVE-2025-2336）AngularJS ngSanitize模块SVG元素属性不恰当过滤漏洞