PT-2024-9452 · Unknown · Angular-Expressions
Jorianwoltjer
·
Published
2024-12-10
·
Updated
2025-01-03
·
CVE-2024-54152
CVSS v4.0
9.3
Critical
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions:
Angular Expressions versions prior to 1.4.3
Description:
The issue is related to the incorrect management of code generation in the Angular Expressions module for the Angular.JS web framework. An attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex payload, one can get full access to arbitrary code execution on the system.
Recommendations:
For versions prior to 1.4.3, update to version 1.4.3 to resolve the issue.
As a temporary workaround, consider disabling access to
proto globally.
Alternatively, make sure to use the compiled function with just one argument, for example: const result = expressions.compile(" proto .constructor")({});, although this will limit the feature of locals if needed.Exploit
Fix
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Angular-Expressions