Vulnerability library
Security checkDecember 10, 2024

Angular Expressions - Remote Code Execution when using locals

Understand the exposure, see the recommended fix, and check whether your own website has related weaknesses.

High severitynpmangular-expressions

Check your website

Find this and other vulnerabilities with a free scan.

Your scan runs on your computer. No account required.

Description

An attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system.

Recommendation

Update the angular-expressions package to the latest compatible version. Followings are version details:

  • Affected version(s): < 1.4.3
  • Patched version(s): 1.4.3

References

Could your website be exposed too?

SmartScanner can check your website for Angular Expressions - Remote Code Execution when using locals and gives you actionable findings to investigate.

Start a free scan

Related Issues

You might also like:

Security Testing of WebSites Using JavaScript

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated December 10, 2024