Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

K000162342: Angular JS vulnerabilities CVE-2024-8372, CVE-2024-8373, CVE-2024-21490, CVE-2025-0716

🗓️ 20 Jul 2026 06:24:10Reported by f5Type 
f5
 f5🔗 my.f5.com👁 7 Views

Flaws in AngularJS allow content spoofing via srcset and href attributes, possible DoS, with end of life status.

Related
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM Storage Ceph is vulnerable to cross site scripting and denial of service via regular expressions in Grafana
27 Jun 202519:39
–ibm
IBM Security Bulletins		Security Bulletin: Due to use angular-1.8.2.min.js , IBM webMethods Integration Server is affected by multiple vulnerabilities.
22 Apr 202604:59
–ibm
ATTACKERKB		CVE-2024-21490
10 Feb 202405:15
–attackerkb
BDU FSTEC		The vulnerability of the ng-srcset component in the application design and development environment for Angular applications allows attackers to trigger a service failure.
3 Jun 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability of the AngularJS JavaScript framework for developing single-page applications lies in its incomplete filtering of special elements. This allows attackers to bypass existing security restrictions and perform spear-phishing attacks.
5 Mar 202500:00
–bdu_fstec
BDU FSTEC		The vulnerability of the AngularJS JavaScript framework for developing single-page applications stems from improper checking of input data’s security equivalence. This allows attackers to circumvent existing security restrictions and perform spear-phishing attacks.
5 Mar 202500:00
–bdu_fstec
BDU FSTEC		The vulnerability of the AngularJS JavaScript framework for developing single-page applications relates to incomplete filtering of special elements, allowing attackers to perform cross-site scripting attacks.
19 May 202500:00
–bdu_fstec
Chainguard		CVE-2024-21490 vulnerabilities
21 Mar 202510:12
–cgr
Chainguard		CVE-2024-8372 vulnerabilities
7 Jan 202601:30
–cgr
Chainguard		CVE-2024-8373 vulnerabilities
7 Jan 202601:30
–cgr
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
20 Jul 2026 06:24Current
6.3Medium risk
Vulners AI Score6.3
CVSS 3.17.5
EPSS0.01891
SSVC
angularjssrcset spoofinghref spoofingcontent spoofingdenial of serviceend of life
7