CVE-2026-32635 (GCVE-0-2026-32635)

Vulnerability from cvelistv5 – Published: 2026-03-13 20:58 – Updated: 2026-03-17 03:55
VLAI
Title
Angular has XSS in i18n attribute bindings
Summary
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20, a Cross-Site Scripting (XSS) vulnerability has been identified in the Angular runtime and compiler. It occurs when the application uses a security-sensitive attribute (for example href on an anchor tag) together with Angular's ability to internationalize attributes. Enabling internationalization for the sensitive attribute by adding i18n-<attribute> name bypasses Angular's built-in sanitization mechanism, which when combined with a data binding to untrusted user-generated data can allow an attacker to inject a malicious script. This vulnerability is fixed in 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20.
Severity
8.6 (High)
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-03-16 00:00 UTC
CWE
  • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
References
Impacted products
Vendor Product Version CPE status
@angular compiler Affected: >= 22.0.0-next.0, < 22.0.0-next.3
Affected: >= 21.0.0-next.0, < 21.2.4
Affected: >= 20.0.0-next.0, < 20.3.18
Affected: >= 17.0.0.next.0, < 19.2.20
guessed Create a notification for this product.
@angular core Affected: >= 22.0.0-next.0, < 22.0.0-next.3
Affected: >= 21.0.0-next.0, < 21.2.4
Affected: >= 20.0.0-next.0, < 20.3.18
Affected: >= 17.0.0.next.0, < 19.2.20
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-32635",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-16T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-17T03:55:33.785Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "compiler",
          "vendor": "@angular",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 22.0.0-next.0, \u003c 22.0.0-next.3"
            },
            {
              "status": "affected",
              "version": "\u003e= 21.0.0-next.0, \u003c 21.2.4"
            },
            {
              "status": "affected",
              "version": "\u003e= 20.0.0-next.0, \u003c 20.3.18"
            },
            {
              "status": "affected",
              "version": "\u003e= 17.0.0.next.0, \u003c 19.2.20"
            }
          ]
        },
        {
          "product": "core",
          "vendor": "@angular",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 22.0.0-next.0, \u003c 22.0.0-next.3"
            },
            {
              "status": "affected",
              "version": "\u003e= 21.0.0-next.0, \u003c 21.2.4"
            },
            {
              "status": "affected",
              "version": "\u003e= 20.0.0-next.0, \u003c 20.3.18"
            },
            {
              "status": "affected",
              "version": "\u003e= 17.0.0.next.0, \u003c 19.2.20"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20, a Cross-Site Scripting (XSS) vulnerability has been identified in the Angular runtime and compiler. It occurs when the application uses a security-sensitive attribute (for example href on an anchor tag) together with Angular\u0027s ability to internationalize attributes. Enabling internationalization for the sensitive attribute by adding i18n-\u003cattribute\u003e name bypasses Angular\u0027s built-in sanitization mechanism, which when combined with a data binding to untrusted user-generated data can allow an attacker to inject a malicious script. This vulnerability is fixed in 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-13T20:58:12.554Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/angular/angular/security/advisories/GHSA-g93w-mfhg-p222",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/angular/angular/security/advisories/GHSA-g93w-mfhg-p222"
        },
        {
          "name": "https://github.com/angular/angular/pull/67541",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/angular/angular/pull/67541"
        },
        {
          "name": "https://github.com/angular/angular/pull/67561",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/angular/angular/pull/67561"
        }
      ],
      "source": {
        "advisory": "GHSA-g93w-mfhg-p222",
        "discovery": "UNKNOWN"
      },
      "title": "Angular has XSS in i18n attribute bindings"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-32635",
    "datePublished": "2026-03-13T20:58:12.554Z",
    "dateReserved": "2026-03-12T15:29:36.559Z",
    "dateUpdated": "2026-03-17T03:55:33.785Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-32635",
      "date": "2026-09-29",
      "epss": "0.00483",
      "percentile": "0.39215"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "compiler",
                "vendor": "@angular",
                "versions": [
                  {
                    "status": "affected",
                    "version": "\u003e= 22.0.0-next.0, \u003c 22.0.0-next.3"
                  },
                  {
                    "status": "affected",
                    "version": "\u003e= 21.0.0-next.0, \u003c 21.2.4"
                  },
                  {
                    "status": "affected",
                    "version": "\u003e= 20.0.0-next.0, \u003c 20.3.18"
                  },
                  {
                    "status": "affected",
                    "version": "\u003e= 17.0.0.next.0, \u003c 19.2.20"
                  }
                ]
              },
              {
                "product": "core",
                "vendor": "@angular",
                "versions": [
                  {
                    "status": "affected",
                    "version": "\u003e= 22.0.0-next.0, \u003c 22.0.0-next.3"
                  },
                  {
                    "status": "affected",
                    "version": "\u003e= 21.0.0-next.0, \u003c 21.2.4"
                  },
                  {
                    "status": "affected",
                    "version": "\u003e= 20.0.0-next.0, \u003c 20.3.18"
                  },
                  {
                    "status": "affected",
                    "version": "\u003e= 17.0.0.next.0, \u003c 19.2.20"
                  }
                ]
              }
            ],
            "source": "security-advisories@github.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:angular:angular_cli:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DA2F5BE6-6AF7-43BB-89EF-0670E30165E9",
                    "versionEndExcluding": "19.2.0",
                    "versionStartIncluding": "17.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:angular:angular_cli:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2112F98F-52FA-42F9-874F-D8DA0AB67859",
                    "versionEndIncluding": "20.3.18",
                    "versionStartIncluding": "20.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:angular:angular_cli:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DC4EA7F1-EFC7-4009-9432-69293D3F80D3",
                    "versionEndExcluding": "21.2.4",
                    "versionStartIncluding": "21.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:angular:angular_cli:22.0.0:next0:*:*:*:*:*:*",
                    "matchCriteriaId": "33D19930-FFB9-411A-9BA8-A4F861A45FCE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:angular:angular_cli:22.0.0:next1:*:*:*:*:*:*",
                    "matchCriteriaId": "5568C723-9BBD-4188-BA3C-3B0E3CB2786C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20, a Cross-Site Scripting (XSS) vulnerability has been identified in the Angular runtime and compiler. It occurs when the application uses a security-sensitive attribute (for example href on an anchor tag) together with Angular\u0027s ability to internationalize attributes. Enabling internationalization for the sensitive attribute by adding i18n-\u003cattribute\u003e name bypasses Angular\u0027s built-in sanitization mechanism, which when combined with a data binding to untrusted user-generated data can allow an attacker to inject a malicious script. This vulnerability is fixed in 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20."
          },
          {
            "lang": "es",
            "value": "Angular es una plataforma de desarrollo para construir aplicaciones web m\u00f3viles y de escritorio usando TypeScript/JavaScript y otros lenguajes. Antes de las versiones 22.0.0-next.3, 21.2.4, 20.3.18 y 19.2.20, se ha identificado una vulnerabilidad de cross-site scripting (XSS) en el tiempo de ejecuci\u00f3n y el compilador de Angular. Ocurre cuando la aplicaci\u00f3n utiliza un atributo sensible a la seguridad (por ejemplo, href en una etiqueta de anclaje) junto con la capacidad de Angular para internacionalizar atributos. Habilitar la internacionalizaci\u00f3n para el atributo sensible a\u00f1adiendo i18n- omite el mecanismo de saneamiento integrado de Angular, lo que, cuando se combina con un enlace de datos a datos no confiables generados por el usuario, puede permitir a un atacante inyectar un script malicioso. Esta vulnerabilidad est\u00e1 corregida en las versiones 22.0.0-next.3, 21.2.4, 20.3.18 y 19.2.20."
          }
        ],
        "id": "CVE-2026-32635",
        "lastModified": "2026-06-17T10:36:08.510",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.0,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.3,
              "impactScore": 6.0,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 8.6,
                "baseSeverity": "HIGH",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "NOT_DEFINED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "LOW",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "PASSIVE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "security-advisories@github.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-32635",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-16T00:00:00+00:00",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-03-16T14:19:40.753",
        "references": [
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Issue Tracking",
              "Patch"
            ],
            "url": "https://github.com/angular/angular/pull/67541"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Issue Tracking",
              "Patch"
            ],
            "url": "https://github.com/angular/angular/pull/67561"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Mitigation",
              "Vendor Advisory"
            ],
            "url": "https://github.com/angular/angular/security/advisories/GHSA-g93w-mfhg-p222"
          }
        ],
        "sourceIdentifier": "security-advisories@github.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-79"
              }
            ],
            "source": "security-advisories@github.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-28T07:29:19+00:00",
      "cve": "CVE-2026-32635",
      "id": "CVE-2026-32635",
      "initial_release_date": "2026-03-13T20:58:12.554000+00:00",
      "product_status:known_affected": "25",
      "product_status:known_not_affected": "3",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "@angular/core: @angular/compiler: Angular has XSS in i18n attribute bindings",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32635.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-32635",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-03-16T15:29:00.270619Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-03-16T15:31:34.969Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "compiler",
              "vendor": "@angular",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 22.0.0-next.0, \u003c 22.0.0-next.3"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 21.0.0-next.0, \u003c 21.2.4"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 20.0.0-next.0, \u003c 20.3.18"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 17.0.0.next.0, \u003c 19.2.20"
                }
              ]
            },
            {
              "product": "core",
              "vendor": "@angular",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 22.0.0-next.0, \u003c 22.0.0-next.3"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 21.0.0-next.0, \u003c 21.2.4"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 20.0.0-next.0, \u003c 20.3.18"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 17.0.0.next.0, \u003c 19.2.20"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20, a Cross-Site Scripting (XSS) vulnerability has been identified in the Angular runtime and compiler. It occurs when the application uses a security-sensitive attribute (for example href on an anchor tag) together with Angular\u0027s ability to internationalize attributes. Enabling internationalization for the sensitive attribute by adding i18n-\u003cattribute\u003e name bypasses Angular\u0027s built-in sanitization mechanism, which when combined with a data binding to untrusted user-generated data can allow an attacker to inject a malicious script. This vulnerability is fixed in 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 8.6,
                "baseSeverity": "HIGH",
                "privilegesRequired": "LOW",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "PASSIVE",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-79",
                  "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-03-13T20:58:12.554Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/angular/angular/security/advisories/GHSA-g93w-mfhg-p222",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/angular/angular/security/advisories/GHSA-g93w-mfhg-p222"
            },
            {
              "name": "https://github.com/angular/angular/pull/67541",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/angular/angular/pull/67541"
            },
            {
              "name": "https://github.com/angular/angular/pull/67561",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/angular/angular/pull/67561"
            }
          ],
          "source": {
            "advisory": "GHSA-g93w-mfhg-p222",
            "discovery": "UNKNOWN"
          },
          "title": "Angular has XSS in i18n attribute bindings"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-32635",
        "datePublished": "2026-03-13T20:58:12.554Z",
        "dateReserved": "2026-03-12T15:29:36.559Z",
        "dateUpdated": "2026-03-17T03:55:33.785Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.