CVE-2023-26116
SOURCE - githubSummary
All versions of the package angular are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.
EPSS Score: 0.00201 (0.583)
Common Weakness Enumeration (CWE)
SOURCE - nist
Inefficient Regular Expression Complexity
SOURCE - github
Inefficient Regular Expression Complexity
SOURCE - gitlab
SOURCE - redhat
Inefficient Regular Expression Complexity
NIST
CREATED
UPDATED
SOURCE IDCVE-2023-26116
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
5.3mediumGitHub
CREATED
UPDATED
SOURCE IDGHSA-2vrf-hf26-jrp5
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
5.3mediumDebian
CREATED
UPDATED
SOURCE IDCVE-2023-26116
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM SOURCE
Ubuntu
CREATED
UPDATED
SOURCE IDCVE-2023-26116
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
5.3mediumRed Hat
CREATED
UPDATED
SOURCE IDCVE-2023-26116
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
5.3mediumintheWild
CREATED
UPDATED
SOURCE IDCVE-2023-26116
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM SOURCE