CVE-2025-62427: angular-cli >=19.0.0-next.0, < 19.2.18, >=20.0.0-next.0, < 20.3.6, >=21.0.0-next.0, < 21.0.0-next.8

Affected technology

angular-cli · >=19.0.0-next.0, < 19.2.18, >=20.0.0-next.0, < 20.3.6, >=21.0.0-next.0, < 21.0.0-next.8
angular

Component: Not specified by the source
Function: createRequestUrl

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An attacker can specify an external domain in the URL path, tricking the Angular SSR environment into setting the page's virtual location (accessible via DOCUMENT or PlatformLocation tokens) to this attacker-controlled domain. Vendor/CNA’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality impact as high; integrity and availability impact as none.