Commit 2566c59
srcANGULAR: applied fix for CVE-2024-29180 security vulenerabiltiy
While not directly involved and used, the Angular sample inside
srcANGULAR/ directory contains a security vulnerability
CVE-2024-29180 from one if Angular's depedency with high severity
(7.4/10). The problem is mainly because the middleware is able to
perform path traversal and eventually obtain sensitive files like
/etc/passwd using simple command like:
$ curl localhost:8080/public/..%2f..%2f..%2f..%2f../etc/passwd
Hence, we need to amend it and roll out a hot release.
This patch applies CVE-2024-29180 fixes in srcANGULAR/ directory.
Co-authored-by: Shuralyov, Jean <jean.shuralyov@proton.me>
Co-authored-by: Galyna, Cory <cory.galyna@gmail.com>
Co-authored-by: (Holloway) Chew, Kean Ho <hollowaykeanho@gmail.com>
Signed-off-by: (Holloway) Chew, Kean Ho <hollowaykeanho@gmail.com>1 parent d4ff728 commit 2566c59
2 files changed
+8
-8
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
171 | 171 | | |
172 | 172 | | |
173 | 173 | | |
174 | | - | |
| 174 | + | |
175 | 175 | | |
176 | 176 | | |
177 | 177 | | |
| |||
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments