← CVE Intelligence

CVE-2023-26117

n/a / angular PUBLISHED

Description (CNA)

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.

Affected (CNA)

Vendor / productVersions
n/a / angularaffected 1.0.0 before *
n/a / org.webjars.bower:angularaffected 1.0.0 before *
n/a / org.webjars.npm:angularaffected 1.0.0 before *
n/a / org.webjars.bowergithub.angular:angularaffected 0 before *

CWE

CWE-1333

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.