Lucene search
+L

389 matches found

OSV
OSV
•added 2024/09/09 3:15 p.m.•11 views

UBUNTU-CVE-2024-8372

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects AngularJS versions 1.3.0-rc.4 and...

4.8CVSS5.8AI score0.00609EPSS
SaveExploits1References5
CVE
CVE
•added 2024/09/09 2:48 p.m.•156 views

CVE-2024-8373

CVE-2024-8373 affects AngularJS across distributions; root cause is improper sanitization of the srcset attribute in HTML elements, enabling potential Content Spoofing. Affected versions are older AngularJS; Debian LTS advisory (DLA-4242) fixes angular.js to 1.8.3-1+deb12u1~deb11u1, and related ...

4.8CVSS4.5AI score0.00635EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2024/09/09 2:48 p.m.•16 views

CVE-2024-8373 AngularJS improper sanitization in '<source>' element

Improper sanitization of the value of the srcset attribute in HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects all versions of...

4.8CVSS6.6AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2024/09/09 2:48 p.m.•25 views

CVE-2024-8373 AngularJS improper sanitization in '<source>' element

Improper sanitization of the value of the srcset attribute in HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects all versions of...

4.8CVSS6.5AI score0.00635EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2024/09/09 2:48 p.m.•84 views

CVE-2024-8373

Improper sanitization of the value of the srcset attribute in HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects all versions of...

4.8CVSS6.8AI score0.00635EPSS
SaveExploits1
Cvelist
Cvelist
•added 2024/09/09 2:48 p.m.•68 views

CVE-2024-8373 AngularJS improper sanitization in '<source>' element

Improper sanitization of the value of the srcset attribute in HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects all versions of...

4.8CVSS0.00635EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/09/09 2:46 p.m.•23 views

CVE-2024-8372 AngularJS improper sanitization in 'srcset' attribute

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects AngularJS versions 1.3.0-rc.4 and...

4.8CVSS4.6AI score0.00609EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2024/09/09 2:46 p.m.•92 views

CVE-2024-8372

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects AngularJS versions 1.3.0-rc.4 and...

4.8CVSS6.8AI score0.00609EPSS
SaveExploits1
Cvelist
Cvelist
•added 2024/09/09 2:46 p.m.•67 views

CVE-2024-8372 AngularJS improper sanitization in 'srcset' attribute

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects AngularJS versions 1.3.0-rc.4 and...

4.8CVSS0.00609EPSS
SaveExploits1References2
OSV
OSV
•added 2024/09/09 2:46 p.m.•30 views

CVE-2024-8372 AngularJS improper sanitization in 'srcset' attribute

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects AngularJS versions 1.3.0-rc.4 and...

4.8CVSS6.6AI score
SaveExploits0References8
CVE
CVE
•added 2024/09/09 2:46 p.m.•154 views

CVE-2024-8372

CVE-2024-8372 affects AngularJS; the issue is an improper sanitization of the srcset value (and related attributes) in AngularJS’s HTML rendering, allowing attackers to bypass image source restrictions and potentially enable Content Spoofing. Affected versions include 1.3.0-rc.4 and later. The An...

4.8CVSS4.6AI score0.00609EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2024/09/09 12:00 a.m.•13 views

AngularJS 安全漏洞

AngularJS is a TypeScript-based open source web application framework from AngularJS Open Source. A security vulnerability exists in AngularJS version 1.3.0-rc.4 and later, which stems from improper cleanup of the srcset attribute value...

4.8CVSS6.5AI score0.00609EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2024/09/09 12:00 a.m.•12 views

CVE-2024-8373

Improper sanitization of the value of the srcset attribute in HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects all versions of...

4.8CVSS7AI score0.00635EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2024/09/09 12:00 a.m.•18 views

CVE-2024-8372

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects AngularJS versions 1.3.0-rc.4 and...

4.8CVSS7AI score0.00609EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/09 12:00 a.m.•1 views

CVE-2024-8373: Incomplete Filtering of Special Elements

Improper sanitization of the value of the srcset attribute in HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects all versions of...

4.8CVSS6.2AI score0.00635EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/09/09 12:00 a.m.•16 views

AngularJS 安全漏洞

AngularJS is a TypeScript-based open source web application framework from AngularJS Open Source. A security vulnerability exists in AngularJS that stems from mishandling the value of the srcset attribute in the source HTML element, which could allow an attacker to bypass common image source...

4.8CVSS6.2AI score0.00635EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/09 12:00 a.m.•0 views

CVE-2024-8372: Improper Validation of Unsafe Equivalence in Input

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects AngularJS versions 1.3.0-rc.4 and...

4.8CVSS6.2AI score0.00609EPSS
SaveExploits1References1
IBM Security Bulletins
IBM Security Bulletins
•added 2024/06/03 1:24 p.m.•38 views

Security Bulletin: Multiple vulnerabilities in angular.js affect IBM Business Automation Workflow.

Summary IBM Business Automation Workflow packages a vulnerable copy of angular.js. Vulnerability Details CVEID:CVE-2023-26117 DESCRIPTION: AngularJS is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw in the $resource service. By providing...

6.1CVSS5.6AI score0.07266EPSS
SaveExploits4Affected Software2
Positive Technologies
Positive Technologies
•added 2024/05/21 12:00 a.m.•6 views

PT-2024-38977

Name of the Vulnerable Software and Affected Versions: AngularJS versions 1.3.0-rc.4 and greater Description: The issue is due to improper sanitization of the value of the srcset attribute in AngularJS, allowing attackers to bypass common image source restrictions. This can lead to a form of...

4.8CVSS7AI score0.00635EPSS
SaveExploits2References34
Positive Technologies
Positive Technologies
•added 2024/05/21 12:00 a.m.•8 views

PT-2024-38978

Name of the Vulnerable Software and Affected Versions: AngularJS versions all Description: The issue is related to improper sanitization of the value of the srcset attribute in HTML elements in AngularJS, allowing attackers to bypass common image source restrictions. This can also lead to a form ...

4.8CVSS7AI score0.00635EPSS
SaveExploits2References32
Rows per page
Query Builder