AngularJS improper sanitization in SVG '<image>' element
Published Apr 29, 2025
2.9
LOWCVSS 4.0
EPSS 0.40%
Description
Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing and also negatively affect the application's performance and behavior by using too large or slow-to-load images.
This issue affects all versions of AngularJS.
Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .
Affected products
-
Affected
- ≥ 0.0.0
No data.
No data.
Logging Subsystem for Red Hat OpenShift
openshift-logging/kibana6-rhel8
Fix deferred
Red Hat Enterprise Linux 10
firefox
Fix deferred
Red Hat Enterprise Linux 10
gjs
Fix deferred
Red Hat Enterprise Linux 10
grafana
Fix deferred
Red Hat Enterprise Linux 10
thunderbird
Fix deferred
Red Hat Enterprise Linux 6
firefox
Fix deferred
Red Hat Enterprise Linux 6
thunderbird
Fix deferred
Red Hat Enterprise Linux 7
firefox
Fix deferred
Red Hat Enterprise Linux 7
thunderbird
Fix deferred
Red Hat Enterprise Linux 8
firefox
Fix deferred
Red Hat Enterprise Linux 8
grafana
Fix deferred
Red Hat Enterprise Linux 8
mozjs60
Fix deferred
Red Hat Enterprise Linux 8
thunderbird
Fix deferred
Red Hat Enterprise Linux 9
firefox
Fix deferred
Red Hat Enterprise Linux 9
firefox:flatpak/firefox
Fix deferred
Red Hat Enterprise Linux 9
gjs
Fix deferred
Red Hat Enterprise Linux 9
grafana
Fix deferred
Red Hat Enterprise Linux 9
polkit
Not affected
Red Hat Enterprise Linux 9
thunderbird
Fix deferred
Red Hat Enterprise Linux 9
thunderbird:flatpak/thunderbird
Fix deferred
Red Hat Fuse 7
io.hawt-hawtio-integration
Fix deferred
Red Hat Fuse 7
io.hawt-hawtio-online
Fix deferred
Red Hat Fuse 7
io.hawt-project
Fix deferred
Red Hat JBoss Enterprise Application Platform 7
io.hawt-project
Fix deferred
Red Hat JBoss Enterprise Application Platform 8
io.hawt-project
Fix deferred
Red Hat JBoss Enterprise Application Platform Expansion Pack
io.hawt-project
Fix deferred
Red Hat OpenStack Platform 16.2
qpid-dispatch
Fix deferred
Red Hat Quay 3
quay/quay-rhel8
Fix deferred
Red Hat Single Sign-On 7
org.keycloak-keycloak-parent
Fix deferred
| Product | Package | State | Advisory |
|---|---|---|---|
| Logging Subsystem for Red Hat OpenShift | openshift-logging/kibana6-rhel8 | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | firefox | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | gjs | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | grafana | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | thunderbird | Fix deferred | n/a |
| Red Hat Enterprise Linux 6 | firefox | Fix deferred | n/a |
| Red Hat Enterprise Linux 6 | thunderbird | Fix deferred | n/a |
| Red Hat Enterprise Linux 7 | firefox | Fix deferred | n/a |
| Red Hat Enterprise Linux 7 | thunderbird | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | firefox | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | grafana | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | mozjs60 | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | thunderbird | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | firefox | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | firefox:flatpak/firefox | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | gjs | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | grafana | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | polkit | Not affected | n/a |
| Red Hat Enterprise Linux 9 | thunderbird | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | thunderbird:flatpak/thunderbird | Fix deferred | n/a |
| Red Hat Fuse 7 | io.hawt-hawtio-integration | Fix deferred | n/a |
| Red Hat Fuse 7 | io.hawt-hawtio-online | Fix deferred | n/a |
| Red Hat Fuse 7 | io.hawt-project | Fix deferred | n/a |
| Red Hat JBoss Enterprise Application Platform 7 | io.hawt-project | Fix deferred | n/a |
| Red Hat JBoss Enterprise Application Platform 8 | io.hawt-project | Fix deferred | n/a |
| Red Hat JBoss Enterprise Application Platform Expansion Pack | io.hawt-project | Fix deferred | n/a |
| Red Hat OpenStack Platform 16.2 | qpid-dispatch | Fix deferred | n/a |
| Red Hat Quay 3 | quay/quay-rhel8 | Fix deferred | n/a |
| Red Hat Single Sign-On 7 | org.keycloak-keycloak-parent | Fix deferred | n/a |
angular
npm
Introduced 0 Fixed not fixed
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | angular | 0 | not fixed |
Remediation
Red Hat mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
References (9)
- https://access.redhat.com/security/cve/CVE-2025-0716 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2362958 Issue Tracking
- https://codepen.io/herodevs/pen/qEWQmpd/a86a0d29310e12c7a3756768e6c7b915 exploittechnical-description
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-12635 Advisory
- https://github.com/advisories/GHSA-j58c-ww9w-pwp5 Advisory
- https://lists.debian.org/debian-lts-announce/2025/07/msg00005.html
- https://nvd.nist.gov/vuln/detail/CVE-2025-0716
- https://www.cve.org/CVERecord?id=CVE-2025-0716
- https://www.herodevs.com/vulnerability-directory/cve-2025-0716 exploitthird-party-advisory
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2025-0716 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2362958 | Issue Tracking | |
| https://codepen.io/herodevs/pen/qEWQmpd/a86a0d29310e12c7a3756768e6c7b915 | exploittechnical-description | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-12635 | Advisory | |
| https://github.com/advisories/GHSA-j58c-ww9w-pwp5 | Advisory | |
| https://lists.debian.org/debian-lts-announce/2025/07/msg00005.html | ||
| https://nvd.nist.gov/vuln/detail/CVE-2025-0716 | ||
| https://www.cve.org/CVERecord?id=CVE-2025-0716 | ||
| https://www.herodevs.com/vulnerability-directory/cve-2025-0716 | exploitthird-party-advisory |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
GitHub