Home

Description

An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing an Angular template payload, or a victim can be socially engineered to import a malicious report template. When the victim views or imports the report, the Angular template executes in their browser context, allowing the attacker to modify application data, or disrupt application availability. Full XSS exploitation and direct information disclosure are prevented by the existing input validation and Content Security Policy configuration.

PUBLISHED Reserved 2025-04-16 | Published 2026-05-19 | Updated 2026-05-19 | Assigner Nozomi




MEDIUM: 5.1CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

MEDIUM: 4.6CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

Problem types

CWE-1336 Improper neutralization of special elements used in a template engine

Product status

Default status
unaffected

Any version before 26.1.0
affected

Default status
unaffected

Any version before 26.1.0
affected

Credits

This issue was found by Stefano Libero and Andrea Palanca of Nozomi Networks Product Security team during an internal investigation. finder

References

security.nozominetworks.com/NN-2026:3-01

cve.org (CVE-2025-40900)

nvd.nist.gov (CVE-2025-40900)

Download JSON