（CVE-2025-2336）AngularJS ngSanitize模块SVG元素属性不恰当过滤漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-2336
• https://www.herodevs.com/vulnerability-directory/cve-2025-2336
• https://github.com/advisories/GHSA-4p4w-6hg8-63wx
• https://www.miggo.io/vulnerability-database/cve/CVE-2025-2336
• https://vulnerability.circl.lu/vuln/cve-2025-2336
• https://www.sentinelone.com/vulnerability-database/cve-2025-2336/
• https://www.resolvedsecurity.com/vulnerability-catalog/CVE-2025-2336
• https://vulners.com/cve/CVE-2025-2336
• https://access.redhat.com/security/cve/cve-2025-2336

Related Vulnerabilities

• PoCCVE-2021-41174: Grafana 8.0.0 <= v.8.2.2 - Angularjs Rendering Cross-Site Scripting
• PoCangularjs-code-csp-bypass: Content-Security-Policy Bypass - AngularJS Code
• AngularJS 安全漏洞(CVE-2022-25844)