CVE-2024-8372

🗓️ 09 Sep 2024 14:46:03Reported by Debian Security Bug TrackerType

Improper sanitization of '[srcset]' in AngularJS allows image source bypass leading to Content Spoofing CVE-2024-837

Reporter	Title	Published	Views	Family All 37
BDU FSTEC	The vulnerability of the AngularJS JavaScript framework for developing single-page applications stems from improper checking of input data’s security equivalence. This allows attackers to circumvent existing security restrictions and perform spear-phishing attacks.	5 Mar 202500:00	–	bdu_fstec
Chainguard	CVE-2024-8372 vulnerabilities	7 Jan 202601:30	–	cgr
Circl	CVE-2024-8372	9 Sep 202418:09	–	circl
CNNVD	AngularJS 安全漏洞	9 Sep 202400:00	–	cnnvd
CVE	CVE-2024-8372	9 Sep 202414:46	–	cve
Cvelist	CVE-2024-8372 AngularJS improper sanitization in 'srcset' attribute	9 Sep 202414:46	–	cvelist
Debian	[SECURITY] [DLA 4242-1] angular.js security update	19 Jul 202522:30	–	debian
Tenable Nessus	Debian dla-4242 : libjs-angularjs - security update	20 Jul 202500:00	–	nessus
Tenable Nessus	TencentOS Server 4: grafana (TSSA-2025:0594)	15 Aug 202500:00	–	nessus
Tenable Nessus	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : AngularJS vulnerabilities (USN-7958-1)	14 Jan 202600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	12	any	angular.js	1.8.3-1+deb12u1	angular.js_1.8.3-1+deb12u1_any.deb
Debian	11	any	angular.js	1.8.3-1+deb12u1~deb11u1	angular.js_1.8.3-1+deb12u1~deb11u1_any.deb
Debian	13	any	angular.js	1.8.3-2	angular.js_1.8.3-2_any.deb
Debian	14	any	angular.js	1.8.3-2	angular.js_1.8.3-2_any.deb
Debian	999	any	angular.js	1.8.3-2	angular.js_1.8.3-2_any.deb

09 Sep 2024 14:46Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.14.3 - 4.8

EPSS0.00574

SSVC