CVE-2023-28444

CVE-2023-28444 is a high-severity information disclosure vulnerability affecting angular-server-side-configuration versions prior to 15.1.0. In monorepo setups, it can inadvertently expose backend-specific environment variables in the client-side index.html, due to an overly broad detection scope during build time. This vulnerability has a CVSS score of 7.5 (High), indicating it can be exploited remotely with low complexity to achieve high confidentiality impact without user interaction. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.