Lucene search
+L

Angular SSR has a Server-Side Request Forgery (SSRF) flaw

🗓️ 16 Oct 2025 21:28:19Reported by GitHub Advisory DatabaseType 
github
 github
🔗 github.com👁 17 Views

Angular SSRF flaw: path starting with // or \\ tricks URL resolution to an attacker domain and causes external requests.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Server-Side Request Forgery in Svelte Sveltekit
17 Dec 202522:50
githubexploit
cnnvd
CNNVD
Angular CLI. 代码问题漏洞
16 Oct 202500:00
cnnvd
cve
CVE
CVE-2025-62427
16 Oct 202518:50
cve
cvelist
Cvelist
CVE-2025-62427 Server-Side Request Forgery (SSRF) in Angular SSR
16 Oct 202518:50
cvelist
euvd
EUVD
EUVD-2025-34823
16 Oct 202521:28
euvd
nvd
NVD
CVE-2025-62427
16 Oct 202519:15
nvd
osv
OSV
GHSA-Q63Q-PGMF-MXHR Angular SSR has a Server-Side Request Forgery (SSRF) flaw
16 Oct 202521:28
osv
redhatcve
RedhatCVE
CVE-2025-62427
17 Oct 202519:46
redhatcve
snyk
Snyk
Server-side Request Forgery (SSRF)
16 Oct 202519:42
snyk
veracode
Veracode
Server-Side Request Forgery (SSRF)
8 Dec 202510:15
veracode
Rows per page
Vulners
Node
OR
angularssrRange21.0.0-next.021.0.0-next.8npm
angularssrRange20.0.0-next.020.3.6npm
angularssrRange19.0.0-next.019.2.18npm

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

12 Jan 2026 10:38Current
7High risk
Vulners AI Score7
CVSS 48.7
EPSS0.00403
SSVC
17