CVE-2024-8373mediumCWE-791

CVE-2024-8373: fallo de gravedad media en Google AngularJS

AngularJS improper sanitization in '<source>' element

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear AngularJS+ Monitorear angular.js

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 4.8epss 0.6%
Improper sanitization of the value of the [srcset] attribute in <source> HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing . This issue affects all versions of AngularJS. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
Productos afectados
Google · AngularJS
CVEs relacionadas — Google AngularJS

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-8372MEDIUMAngularJS improper sanitization in 'srcset' attributeEPSS 0.6%CVE-2025-0716MEDIUMAngularJS improper sanitization in SVG '<image>' elementEPSS 0.4%CVE-2026-11998HIGHAngularJS XSS via SCE resource URL sanitization bypassEPSS 0.4%CVE-2025-2336MEDIUMAngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'EPSS 0.3%CVE-2025-4690MEDIUMAngularJS 'linky' filter ReDoSEPSS 0.2%