5.3
Medium
CVE-2023-26117 Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the…
Description
Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| angular 1.0 | 1.0.0 → latest | No fix stated |
| org.webjars.bower:angular 1.0 | 1.0.0 → latest | No fix stated |
| org.webjars.npm:angular 1.0 | 1.0.0 → latest | No fix stated |
| org.webjars.bowergithub.angular:angular | Versions not published |
Other CVEs of angular
The 6 CVEs of angular →
CVE-2024-21490
This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0
7.5
High
CVE-2023-26116
Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the…
5.3
Medium
CVE-2023-26118
Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service (ReDoS) via the …
5.3
Medium
CVE-2022-25869
All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs…
4.2
Medium