REDHAT-BUG-2492579: High severity Google AngularJS vulnerability
A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution within the context of the victim's browser session.
SCE's purpose is to ensure that only trusted or safe values are used in certain security-sensitive contexts, such as resource URLs, including URLs that define executable JavaScript scripts, '<iframe>' documents, route templates, etc. A flaw in the logic that tries to match entire URLs against regular expression matchers can result in partial matches for certain types of regular expressions, effectively bypassing the policies and allowing the use of unsafe values as resource URLs.
This issue affects AngularJS versions greater than or equal to 1.2.0-rc.3.
Note: The AngularJS project was already End-of-Life when this CVE was published and will not receive any updates to address this issue. For more information see the End-of-Life announcement https://docs.angularjs.org/misc/version-support-status .
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2492579?
The severity of REDHAT-BUG-2492579 is classified as high with a score of 7.
What causes the vulnerability identified as REDHAT-BUG-2492579?
REDHAT-BUG-2492579 is caused by a flaw in AngularJS' Strict Contextual Escaping (SCE) logic that allows for the bypass of certain SCE policies.
What are the potential risks of the vulnerability REDHAT-BUG-2492579?
The risks associated with REDHAT-BUG-2492579 include arbitrary JavaScript execution within the context of the victim's browser session.
How do I fix the vulnerability REDHAT-BUG-2492579?
To fix REDHAT-BUG-2492579, ensure you are using an updated version of AngularJS that contains the necessary security patches.
Who is affected by the REDHAT-BUG-2492579 vulnerability?
The REDHAT-BUG-2492579 vulnerability affects users of Google AngularJS who rely on the SCE feature for handling resource URLs.