CVE-2024-33665
angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no doc...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks.
Références
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- report github.com
- web docs.herodevs.com
- web stackblitz.com