CyberRota Analysis
AI-GeneratedThe vulnerability affects the HttpTransferCache in Angular, where repeated request parameters can lead to semantically distinct HttpClient requests sharing the same transfer-cache key, potentially resulting in incorrect backend responses being reused. This could compromise the integrity of data and application behavior. Developers using affected versions prior to 20.3.27, 21.2.19, and 22.0.2 should prioritize updating to mitigate the risk of erroneous data handling in their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same transfer-cache key and reuse a wrong backend response. This issue is fixed in versions 20.3.27, 21.2.19, and 22.0.2.
Related CVEs
Other vulnerabilities affecting the same vendor(s)