CVE-2022-25869 PoC — Angular 跨站脚本漏洞

Source

https://github.com/neverendingsupport/angularjs-poc-cve-2022-25869

Associated Vulnerability

Title: Angular 跨站脚本漏洞 (CVE-2022-25869)
Description:All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting (XSS) due to insecure page caching in the Internet Explorer browser, which allows interpolation of <textarea> elements.

Description

A minimal reproduction of an AngularJS <textarea> XSS vulnerability on IE (tracked as CVE-2022-25869).

Readme

# About

This is a minimal Proof-Of-Concept for an AngularJS `<textarea>` XSS vulnerability affecting Internet Explorer ([CVE-2022-25869](https://www.cve.org/CVERecord?id=CVE-2022-25869)).

You can see it live at <https://neverendingsupport.github.io/angularjs-poc-cve-2022-25869>.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →