CVE-2023-26117
SOURCE - githubSummary
All versions of the package angular are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.
EPSS Score: 0.00201 (0.583)
Common Weakness Enumeration (CWE)
SOURCE - nist
Inefficient Regular Expression Complexity
SOURCE - github
Inefficient Regular Expression Complexity
SOURCE - gitlab
SOURCE - redhat
Inefficient Regular Expression Complexity
NIST
CREATED
UPDATED
SOURCE IDCVE-2023-26117
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
5.3mediumGitHub
CREATED
UPDATED
SOURCE IDGHSA-2qqx-w9hr-q5gx
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
5.3mediumDebian
CREATED
UPDATED
SOURCE IDCVE-2023-26117
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM SOURCE
Ubuntu
CREATED
UPDATED
SOURCE IDCVE-2023-26117
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
5.3mediumRed Hat
CREATED
UPDATED
SOURCE IDCVE-2023-26117
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
5.3mediumintheWild
CREATED
UPDATED
SOURCE IDCVE-2023-26117
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM SOURCE