Improper sanitization of the value of the [srcset]
attribute in <source>
HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing .
This issue affects all versions of AngularJS.
Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
{ "nvd_published_at": "2024-09-09T15:15:12Z", "cwe_ids": [ "CWE-791" ], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2024-09-09T20:19:49Z" }