Skip to content
Fencer Vulns
medium 4.8

CVE-2024-8372 json

AngularJS improper sanitization in 'srcset' attribute

published 2024-09-09 2 y ago modified 2026-09-10 1 mo ago also GHSA-m9gf-397r-hwpg , EUVD-2024-2834

cvss
4.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 49%
public exploits
0
none known

Summary

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing .

This issue affects AngularJS versions 1.3.0-rc.4 and greater.

Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .

Patch / fix

  • angular.js Debian 12 1.8.3-1+deb12u1
  • angular.js Debian 13 1.8.3-2

debian advisories DEBIAN-CVE-2024-8372

  • angular.js Ubuntu 22.04 LTS 1.8.2-2ubuntu0.1
  • angular.js Ubuntu 24.04 LTS 1.8.3-1ubuntu0.24.04.1
  • angular.js Ubuntu Pro 18.04 LTS 1.5.10-1ubuntu0.1~esm1
  • angular.js Ubuntu Pro 20.04 LTS 1.7.9-1ubuntu0.1~esm1

ubuntu advisories UBUNTU-CVE-2024-8372

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-8372 updated cvss 4.3

angularjs: From NVD collector

  • Red Hat Logging Subsystem for Red Hat OpenShift openshift-logging/kibana6-rhel8 Red Hat Enterprise Linux 6 firefox, thunderbird Red Hat Enterprise Linux 7 firefox, thunderbird Red Hat Enterprise Linux 8 firefox, grafana, mozjs60, thunderbird, grafana-loki, grafana-mssql, +11 more Red Hat Enterprise Linux 9 gjs, polkit, firefox, grafana, firefox-x11, polkit-libs, +2 more Red Hat Enterprise Linux 10 gjs, firefox, grafana, thunderbird
    +7 more products
    Red Hat Fuse 7 io.hawt-project, io.hawt-hawtio-online, io.hawt-hawtio-integration Red Hat JBoss Enterprise Application Platform 7 io.hawt-project Red Hat JBoss Enterprise Application Platform 8 io.hawt-project Red Hat JBoss Enterprise Application Platform Expansion Pack io.hawt-project Red Hat OpenStack Platform 16.2 qpid-dispatch-tools, qpid-dispatch-router Red Hat Quay 3 quay/quay-rhel8 Red Hat Single Sign-On 7 org.keycloak-keycloak-parent
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
Proof of concept is public
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.61% chance of exploitation in the next 30 days, higher than 49% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • codepen.io https://codepen.io/herodevs/full/xxoQRNL/0072e627abe03e9cda373bc75b4c1017 referenced PoC, tagged "exploit" by a source, unverified
  • herodevs.com https://www.herodevs.com/vulnerability-directory/cve-2024-8372 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.1 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
NVD 3.1 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
GitHub 3.1 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Affected packages

ecosystem package affected fixed in
npm angular
>=1.3.0-rc.4, <=1.8.3
 no fix listed

Affected products

  • Google AngularJS
  • angularjs angular.js

Classification

Weakness
  • CWE-1289 Improper Validation of Unsafe Equivalence in Input

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.