Description
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.1, Angular's @angular/common HttpTransferCache can cache an authenticated response when Server-Side Rendering (SSR) and hydration use a hierarchical HttpClient configured with withRequestsMadeViaParent. The child TransferCache evaluates an initially anonymous request before delegation, then a parent withInterceptors chain adds an
Remediation
References
Related Vulnerabilities
WordPress Plugin Itinerary Cross-Site Scripting (1.0.0)
Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-27979)
MySQL CVE-2017-3653 Vulnerability (CVE-2017-3653)
WordPress Plugin LiteSpeed Cache Cross-Site Scripting (3.6)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4288)