{"metadata": {"vulnerability": "CVE-2024-8372", "count": 36, "kinds": {"milestone": 9, "sighting": 3, "kev": 0, "other": 24}}, "data": [{"timestamp": "2024-09-02T08:44:11.786Z", "date_only": false, "value": "2024-09-02T08:44:11.786Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-8372", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-09-09T14:46:03.134Z", "date_only": false, "value": "2024-09-09T14:46:03.134Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-8372", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-09-09T15:06:37.579Z", "date_only": false, "value": "2024-09-09T15:06:37.579433Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-8372", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-09T15:06:37.579Z", "date_only": false, "value": "2024-09-09T15:06:37.579433Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-8372", "record": "FKIE_CVE-2024-8372", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-09T15:07:26.780Z", "date_only": false, "value": "2024-09-09T15:07:26.780Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-8372", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-09T15:15:00Z", "date_only": false, "value": "2024-09-09T15:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-8372", "record": "UBUNTU-CVE-2024-8372", "field": "published"}, {"timestamp": "2024-09-09T15:15:12Z", "date_only": false, "value": "2024-09-09T15:15:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M9GF-397R-HWPG", "record": "GHSA-M9GF-397R-HWPG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-09-09T15:15:12.560Z", "date_only": false, "value": "2024-09-09T15:15:12.560", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-8372", "record": "FKIE_CVE-2024-8372", "field": "published"}, {"timestamp": "2024-09-09T15:30:41Z", "date_only": false, "value": "2024-09-09T15:30:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M9GF-397R-HWPG", "record": "GHSA-M9GF-397R-HWPG", "field": "published"}, {"timestamp": "2024-09-09T18:09:30Z", "date_only": false, "value": "2024-09-09T18:09:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/5106", "record": "CVE-2024-8372", "field": "creation_timestamp", "uuid": "3723dd11-ab59-48b8-b7ba-435dbe15a455", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-8372 - AngularJS Image Source Spoofing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-8372 \nPublished : Sept. 9, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Improper sanitization of the value of the '[srcset]' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of  Content Spoofing  .  \n  \nThis issue affects AngularJS versions 1.3.0-rc.4 and greater.  \n  \nNote:  \nThe AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see  here  . \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/5106"}, {"timestamp": "2024-09-09T22:00:00Z", "date_only": false, "value": "2024-09-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2089", "record": "WID-SEC-W-2024-2089", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-09-09T22:00:00Z", "date_only": false, "value": "2024-09-09T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2089", "record": "WID-SEC-W-2024-2089", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-09-09T22:00:00Z", "date_only": false, "value": "2024-09-09T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2089", "record": "WID-SEC-W-2024-2089", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-11-05T23:00:00Z", "date_only": false, "value": "2024-11-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3344", "record": "WID-SEC-W-2024-3344", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-11-05T23:00:00Z", "date_only": false, "value": "2024-11-05T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3344", "record": "WID-SEC-W-2024-3344", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-11-05T23:00:00Z", "date_only": false, "value": "2024-11-05T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3344", "record": "WID-SEC-W-2024-3344", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-12-09T23:00:00Z", "date_only": false, "value": "2024-12-09T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2089", "record": "WID-SEC-W-2024-2089", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-12-18T23:00:00Z", "date_only": false, "value": "2024-12-18T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3344", "record": "WID-SEC-W-2024-3344", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-12-18T23:00:00Z", "date_only": false, "value": "2024-12-18T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3344", "record": "WID-SEC-W-2024-3344", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-12-19T09:12:54.292Z", "date_only": false, "value": "2024-12-19T09:12:54.292+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3344", "record": "WID-SEC-W-2024-3344", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-28T14:10:48Z", "date_only": false, "value": "2025-04-28T14:10:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13680", "record": "CVE-2024-8372", "field": "creation_timestamp", "uuid": "e9f565a0-8f70-4a70-b0f5-f11278dfb9ee", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-8372\n\ud83d\udd25 CVSS Score: 4.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of  Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing .\n\nThis issue affects AngularJS versions 1.3.0-rc.4 and greater.\n\nNote:\nThe AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see  here https://docs.angularjs.org/misc/version-support-status .\n\ud83d\udccf Published: 2024-09-09T14:46:03.134Z\n\ud83d\udccf Modified: 2025-04-28T13:57:39.847Z\n\ud83d\udd17 References:\n1. https://www.herodevs.com/vulnerability-directory/cve-2024-8372\n2. https://codepen.io/herodevs/full/xxoQRNL/0072e627abe03e9cda373bc75b4c1017", "url": "https://t.me/DarkWebInformer_CVEAlerts/13680"}, {"timestamp": "2025-05-28T17:39:48.004Z", "date_only": false, "value": "2025-05-28T17:39:48.004Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / HeroDevs", "record": "CVE-2024-8372", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-20T22:00:00Z", "date_only": false, "value": "2025-07-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2089", "record": "WID-SEC-W-2024-2089", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-11-03T19:34:58.181Z", "date_only": false, "value": "2025-11-03T19:34:58.181Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-8372", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-03T19:34:58.181Z", "date_only": false, "value": "2025-11-03T19:34:58.181Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-8372", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-03T22:48:13Z", "date_only": false, "value": "2025-11-03T22:48:13Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M9GF-397R-HWPG", "record": "GHSA-M9GF-397R-HWPG", "field": "modified"}, {"timestamp": "2026-01-13T23:00:00Z", "date_only": false, "value": "2026-01-13T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2089", "record": "WID-SEC-W-2024-2089", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-01-13T23:00:00Z", "date_only": false, "value": "2026-01-13T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2089", "record": "WID-SEC-W-2024-2089", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-01-14T12:26:00.027Z", "date_only": false, "value": "2026-01-14T12:26:00.027+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2089", "record": "WID-SEC-W-2024-2089", "field": "document.tracking.generator.date"}, {"timestamp": "2026-01-14T18:54:12Z", "date_only": false, "value": "2026-01-14T18:54:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Darkcrai86/564815f485c70b429e11f0fe5033b511", "record": "CVE-2024-8372", "field": "creation_timestamp", "uuid": "1cb897a4-9331-4766-b40f-6ff82f3adc7d", "url": "https://gist.github.com/Darkcrai86/564815f485c70b429e11f0fe5033b511"}, {"timestamp": "2026-01-20T05:17:09Z", "date_only": false, "value": "2026-01-20T05:17:09Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-8372", "record": "UBUNTU-CVE-2024-8372", "field": "modified"}, {"timestamp": "2026-03-11T00:00:00Z", "date_only": true, "value": "2026-03-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0281", "record": "CERTFR-2026-AVI-0281", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-03-12T00:00:00Z", "date_only": false, "value": "2026-03-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0281", "record": "CERTFR-2026-AVI-0281", "field": "last_revision_date"}, {"timestamp": "2026-03-12T00:00:00Z", "date_only": false, "value": "2026-03-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0281", "record": "CERTFR-2026-AVI-0281", "field": "initial_release_date"}, {"timestamp": "2026-03-12T00:00:00Z", "date_only": false, "value": "2026-03-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0281", "record": "CERTFR-2026-AVI-0281", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-17T08:22:27.313Z", "date_only": false, "value": "2026-06-17T08:22:27.313", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-8372", "record": "FKIE_CVE-2024-8372", "field": "lastModified"}]}