VULNERABILITY INTELLIGENCE

CVE-2025-0716

CVSS score4.8 MEDIUM

EPSS probability0.41%

CISA KEVNot currently listed

Published2025-04-29

Last modified2026-06-17

Description

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing and also negatively …