Логотип exploitDog
bind:CVE-2024-8372
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-8372

Количество 6

Количество 6

ubuntu логотип

CVE-2024-8372

больше 1 года назад

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing . This issue affects AngularJS versions 1.3.0-rc.4 and greater. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .

CVSS3: 4.8
EPSS: Низкий
redhat логотип

CVE-2024-8372

больше 1 года назад

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing . This issue affects AngularJS versions 1.3.0-rc.4 and greater. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2024-8372

больше 1 года назад

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing . This issue affects AngularJS versions 1.3.0-rc.4 and greater. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .

CVSS3: 4.8
EPSS: Низкий
debian логотип

CVE-2024-8372

больше 1 года назад

Improper sanitization of the value of the 'srcset' attribute in Angula ...

CVSS3: 4.8
EPSS: Низкий
github логотип

GHSA-m9gf-397r-hwpg

больше 1 года назад

AngularJS allows attackers to bypass common image source restrictions

CVSS3: 4.8
EPSS: Низкий
fstec логотип

BDU:2025-02357

больше 1 года назад

Уязвимость JavaScript-фреймворка для разработки одностраничных приложений АngularJS, связанная с неправильной проверкой небезопасной эквивалентности входных данных, позволяющая нарушителю обойти существующие ограничения безопасности и проводить спуфинг-атаки

CVSS3: 4.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-8372

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing . This issue affects AngularJS versions 1.3.0-rc.4 and greater. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .

CVSS3: 4.8
0%
Низкий
больше 1 года назад
redhat логотип
CVE-2024-8372

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing . This issue affects AngularJS versions 1.3.0-rc.4 and greater. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .

CVSS3: 4.3
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-8372

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing . This issue affects AngularJS versions 1.3.0-rc.4 and greater. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .

CVSS3: 4.8
0%
Низкий
больше 1 года назад
debian логотип
CVE-2024-8372

Improper sanitization of the value of the 'srcset' attribute in Angula ...

CVSS3: 4.8
0%
Низкий
больше 1 года назад
github логотип
GHSA-m9gf-397r-hwpg

AngularJS allows attackers to bypass common image source restrictions

CVSS3: 4.8
0%
Низкий
больше 1 года назад
fstec логотип
BDU:2025-02357

Уязвимость JavaScript-фреймворка для разработки одностраничных приложений АngularJS, связанная с неправильной проверкой небезопасной эквивалентности входных данных, позволяющая нарушителю обойти существующие ограничения безопасности и проводить спуфинг-атаки

CVSS3: 4.8
0%
Низкий
больше 1 года назад

Уязвимостей на страницу