Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
AngularJS improper sanitization in '<source>' element
Vulnerability Description
Improper sanitization of the value of the [srcset] attribute in <source> HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing . This issue affects all versions of AngularJS. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
Vulnerability Type
特殊元素过滤不完全
Vulnerability Title
AngularJS 安全漏洞
Vulnerability Description
AngularJS是AngularJS开源的一款基于TypeScript的开源Web应用程序框架。 AngularJS存在安全漏洞，该漏洞源于对source HTML元素中的[srcset]属性值处理不当，可能允许攻击者绕过常见的图像源限制，导致内容欺骗。
CVSS Information
N/A
Vulnerability Type
N/A