CVE-2016-10524: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

February 18, 2019 (updated February 11, 2022)

i18n-node-angular is a module used to interact between i18n and angular without using additional resources. A REST API endpoint that is used for development in i18n-node-angular before 1.4.0 was not disabled in production environments a malicious user could fill up the server causing a Denial of Service or content injection.

References

github.com/advisories/GHSA-97gv-3p2c-xw7j
github.com/oliversalzburg/i18n-node-angular/commit/877720d2d9bb90dc8233706e81ffa03f99fc9dc8
nodesecurity.io/advisories/80
nvd.nist.gov/vuln/detail/CVE-2016-10524
www.npmjs.com/advisories/80

Code Behaviors & Features

Detect and mitigate CVE-2016-10524 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →