AngularJS improper sanitization in 'srcset' attribute
概要
AngularJS improper sanitization in 'srcset' attribute
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing .
This issue affects AngularJS versions 1.3.0-rc.4 and greater.
Note:
The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2024-8372 angular.js 修正版: 1.8.3-1+deb12u1~deb11u1
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- advisory herodevs.com
- package github.com
- report codepen.io
- web lists.debian.org
- web registry.npmjs.org