CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 46.8%

CVSS Severity

CVSS v3 Score 5.3

References

Products affected by CVE-2023-26116

Angularjs » Angular » Version: 1.7.0

cpe:2.3:a:angularjs:angular:1.7.0
Angularjs » Angular » Version: 1.7.1

cpe:2.3:a:angularjs:angular:1.7.1
Angularjs » Angular » Version: 1.7.2

cpe:2.3:a:angularjs:angular:1.7.2
Angularjs » Angular » Version: 1.7.3

cpe:2.3:a:angularjs:angular:1.7.3
Angularjs » Angular » Version: 1.7.4

cpe:2.3:a:angularjs:angular:1.7.4
Angularjs » Angular » Version: 1.7.5

cpe:2.3:a:angularjs:angular:1.7.5
Angularjs » Angular » Version: 1.7.6

cpe:2.3:a:angularjs:angular:1.7.6
Angularjs » Angular » Version: 1.7.7

cpe:2.3:a:angularjs:angular:1.7.7
Angularjs » Angular » Version: 1.7.8

cpe:2.3:a:angularjs:angular:1.7.8
Angularjs » Angular » Version: 1.7.9

cpe:2.3:a:angularjs:angular:1.7.9
Angularjs » Angular » Version: 1.8.0

cpe:2.3:a:angularjs:angular:1.8.0
Angularjs » Angular » Version: 1.8.1

cpe:2.3:a:angularjs:angular:1.8.1
Angularjs » Angular » Version: 1.8.2

cpe:2.3:a:angularjs:angular:1.8.2
Angularjs » Angular » Version: 1.8.3

cpe:2.3:a:angularjs:angular:1.8.3
Fedoraproject » Fedora » Version: 38

cpe:2.3:o:fedoraproject:fedora:38

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-26116

Products

Pricing

Contact Us