CVE-2024-33665
angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no doc...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- report github.com
- web docs.herodevs.com
- web stackblitz.com