CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-26118

Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service (ReDoS) via the <input type="url"> element due to the usage of an insecure regular expression in the input[url] functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 62.9%

CVSS Severity

CVSS v3 Score 5.3

References

Products affected by CVE-2023-26118

Angularjs » Angular » Version: 1.7.0

cpe:2.3:a:angularjs:angular:1.7.0
Angularjs » Angular » Version: 1.7.1

cpe:2.3:a:angularjs:angular:1.7.1
Angularjs » Angular » Version: 1.7.2

cpe:2.3:a:angularjs:angular:1.7.2
Angularjs » Angular » Version: 1.7.3

cpe:2.3:a:angularjs:angular:1.7.3
Angularjs » Angular » Version: 1.7.4

cpe:2.3:a:angularjs:angular:1.7.4
Angularjs » Angular » Version: 1.7.5

cpe:2.3:a:angularjs:angular:1.7.5
Angularjs » Angular » Version: 1.7.6

cpe:2.3:a:angularjs:angular:1.7.6
Angularjs » Angular » Version: 1.7.7

cpe:2.3:a:angularjs:angular:1.7.7
Angularjs » Angular » Version: 1.7.8

cpe:2.3:a:angularjs:angular:1.7.8
Angularjs » Angular » Version: 1.7.9

cpe:2.3:a:angularjs:angular:1.7.9
Angularjs » Angular » Version: 1.8.0

cpe:2.3:a:angularjs:angular:1.8.0
Angularjs » Angular » Version: 1.8.1

cpe:2.3:a:angularjs:angular:1.8.1
Angularjs » Angular » Version: 1.8.2

cpe:2.3:a:angularjs:angular:1.8.2
Angularjs » Angular » Version: 1.8.3

cpe:2.3:a:angularjs:angular:1.8.3
Fedoraproject » Fedora » Version: 38

cpe:2.3:o:fedoraproject:fedora:38

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-26118

Products

Pricing

Contact Us