Skip to content
ThreatCluster

Angular HTTP Client Vulnerability Exposes XSRF Tokens to Attackers

First seen 27 Nov 2025, 15:36 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

A critical vulnerability in Angular's HTTP Client has been identified, allowing attackers to intercept Cross-Site Request Forgery (XSRF) tokens. This flaw poses a significant risk to applications using Angular, potentially enabling unauthorized actions on behalf of users. Developers are urged to assess their systems and implement necessary security measures.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 183d ago How this analysis works

More articles in this cluster (2)