Angular: Server-Side Request Forgery vulnerability via backslash protocol

A Server-Side Request Forgery (SSRF) vulnerability has been discovered in Angular, exploitable via backslash protocol URLs.

Published 5sem1 sourceNotable

≈ 18sSpeed

The fact

Attackers can trigger server-side requests to internal or external resources.

Updating Angular versions is recommended to fix this security flaw.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on June 16, 2026