CVE-2023-26118
SOURCE - githubSummary
All versions of the package angular are vulnerable to Regular Expression Denial of Service (ReDoS) via the element due to the usage of an insecure regular expression in the input[url] functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.
EPSS Score: 0.00211 (0.595)
Common Weakness Enumeration (CWE)
SOURCE - nist
Inefficient Regular Expression Complexity
SOURCE - github
Inefficient Regular Expression Complexity
SOURCE - gitlab
SOURCE - redhat
Inefficient Regular Expression Complexity
NIST
CREATED
UPDATED
SOURCE IDCVE-2023-26118
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
5.3mediumGitHub
CREATED
UPDATED
SOURCE IDGHSA-qwqh-hm9m-p5hr
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
5.3mediumDebian
CREATED
UPDATED
SOURCE IDCVE-2023-26118
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM SOURCE
Ubuntu
CREATED
UPDATED
SOURCE IDCVE-2023-26118
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
5.3mediumRed Hat
CREATED
UPDATED
SOURCE IDCVE-2023-26118
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
5.3mediumintheWild
CREATED
UPDATED
SOURCE IDCVE-2023-26118
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM SOURCE