This vulnerability arises from incomplete filtering in AngularJS's Strict Contextual Escaping (SCE) mechanism, which is designed to restrict resource URLs to trusted values. The flaw allows partial bypass of URL matching logic, enabling attackers to supply unsafe resource URLs that execute arbitrary JavaScript in the context of the victim's browser session. This can lead to cross-site scripting (XSS) attacks with potential confidentiality, integrity, and availability impacts. The issue affects AngularJS versions >=1.2.0-rc.3. Since AngularJS is end-of-life, no official fixes are available. Red Hat advisories confirm the vulnerability and note the lack of effective mitigations meeting their criteria.

Successful exploitation allows arbitrary JavaScript execution in the victim's browser, potentially leading to information disclosure, session hijacking, and other malicious actions. The vulnerability can compromise confidentiality by exposing sensitive data, impact integrity by executing unauthorized code, and affect availability. The CVSS 3.1 base score is 7.6 (high), reflecting network attack vector, low complexity, no privileges required, user interaction required, and high confidentiality impact with low integrity and availability impacts.

No official patch or fix is available due to AngularJS being end-of-life. Red Hat states that no mitigations meeting their criteria for ease of use, applicability, and stability are currently available. Users are advised to consider upgrading to supported frameworks or versions that do not include the vulnerable AngularJS code. Review and restrict the use of AngularJS in security-sensitive contexts where possible.