← CVE Intelligence

CVE-2023-26118

n/a / angular PUBLISHED

Description (CNA)

Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service (ReDoS) via the <input type="url"> element due to the usage of an insecure regular expression in the input[url] functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.

Affected (CNA)

Vendor / productVersions
n/a / angularaffected 1.4.9 before *
n/a / org.webjars.bower:angularaffected 1.4.9 before *
n/a / org.webjars.npm:angularaffected 1.4.9 before *
n/a / org.webjars.bowergithub.angular:angularaffected 0 before *

CWE

CWE-1333

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.