Angular: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 1

• Medium 4.8
  CVE-2024-8372

  AngularJS improper sanitization in 'srcset' attribute

  Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing . This issue affe…

  Google AngularJS angular.js angular.js Debian Ubuntu npm
  Sep 9, 2024

Revision history

1. 2026-01-13 #4

   Neue Updates aufgenommen

2. 2025-07-20 #3

   Neue Updates von Debian aufgenommen

3. 2024-12-09 #2

   Neue Updates aufgenommen

4. 2024-09-09 #1

   Initiale Fassung

References

• Snyk Vulnerability Database vom 2024-09-09
  https://security.snyk.io/vuln/SNYK-JS-ANGULAR-7924843
• HeroDevs Vulnerability Overview
  https://www.herodevs.com/vulnerability-directory/cve-2024-8372
• Camunda Security Notices
  https://docs.camunda.org/security/notices/#notice-123
• Debian Security Advisory DLA-4242 vom 2025-07-20
  https://lists.debian.org/debian-lts-announce/2025/07/msg00005.html
• Ubuntu Security Notices USN-7958-1 vom 2026-01-14
  https://ubuntu.com/security/notices/USN-7958-1