Beghelli Sicuro24 SicuroWeb embeds AngularJS 1.5.2, an end-of-life component containing known sandbox escape primitives. When combined with template injection p…

Published:

21 april 2026 om 22:00:00

Alert date:

22 april 2026 om 22:11:22

Source:

nvd.nist.gov

Web Technologies, Supply Chain & Dependencies

Beghelli Sicuro24 SicuroWeb embeds end-of-life AngularJS 1.5.2 containing sandbox escape primitives. Combined with template injection, attackers can escape the AngularJS sandbox and achieve arbitrary JavaScript execution in operator browser sessions. This enables session hijacking, DOM manipulation, and persistent browser compromise. Network-adjacent attackers can exploit this via MITM attacks in plaintext HTTP deployments without user interaction.

Technical details

Mitigation steps:

Affected products:

Beghelli Sicuro24 SicuroWeb
AngularJS