Description
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClient after application code validates them with WHATWG URL parsing. The resolveUrl and parseUrl utilities called String.prototype.trim(), which removed leading Unicode whitespace such as U+00A0 or U+FEFF af
Remediation
References
Related Vulnerabilities
WordPress Plugin MP3-jPlayer Cross-Site Scripting (1.8.3)
EspoCRM Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7986)
Magento CVE-2020-9579 Vulnerability (CVE-2020-9579)
WordPress CVE-2011-4899 Vulnerability (CVE-2011-4899)
WordPress Plugin Link Library Cross-Site Scripting (5.9.12.29)