AngularJS allows attackers to bypass common image source restrictions

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-8372 · ADVISORY
• codepen.io/herodevs/full/xxoQRNL/0072e627abe03e9cda373bc75b4c1017 · WEB
• angular/angular.js · PACKAGE
• lists.debian.org/debian-lts-announce/2025/07/msg00005.html · WEB
• security.netapp.com/advisory/ntap-20241122-0002 · WEB
• herodevs.com/vulnerability-directory/cve-2024-8372 · WEB
• security.netapp.com/advisory/ntap-20241122-0002 · Third Party Advisory

Lỗ hổng khác của angularjs

• CVE-2024-8373TRUNG BÌNH 4.3Improper sanitization of the value of the [srcset] attribute in <source> HTML elements in AngularJS allows attackers to bypass common image …
• CVE-2023-26118TRUNG BÌNH 5.3Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service (ReDoS) via the <input type="url"> element…
• CVE-2023-26117TRUNG BÌNH 5.3Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resource service due to t…
• CVE-2023-26116TRUNG BÌNH 5.3Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility fu…
• CVE-2021-4231TRUNG BÌNH 5.4A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments…