AngularJS allows attackers to bypass common image source restrictions

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-8373 · ADVISORY
• codepen.io/herodevs/full/bGPQgMp/8da9ce87e99403ee13a295c305ebfa0b · WEB
• angular/angular.js · PACKAGE
• lists.debian.org/debian-lts-announce/2025/07/msg00005.html · WEB
• security.netapp.com/advisory/ntap-20241122-0003 · WEB
• herodevs.com/vulnerability-directory/cve-2024-8373 · WEB
• security.netapp.com/advisory/ntap-20241122-0003 · Third Party Advisory

angularjs のその他の脆弱性

• CVE-2024-8372中 4.3Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which…
• CVE-2023-26118中 5.3Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service (ReDoS) via the <input type="url"> element…
• CVE-2023-26117中 5.3Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resource service due to t…
• CVE-2023-26116中 5.3Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility fu…
• CVE-2021-4231中 5.4A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments…