5.3

CVE-2023-26116

Exploit
Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Angularjs ≫ Angularjs Version >= 1.2.21 <= 1.8.3
Fedoraproject ≫ Fedora Version38
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.7% 0.741
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
report@snyk.io 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-1333 Inefficient Regular Expression Complexity

The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQWJLE5WE33WNMA54XSJIDXBRK2KL3XJ/
Third Party Advisory
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDKFLKJ6VZKL52AFVW2OVZRMJWHMW55K/
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-5406320
Third Party Advisory
Exploit
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBANGULAR-5406322
Third Party Advisory
Exploit
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-5406321
Third Party Advisory
Exploit
https://security.snyk.io/vuln/SNYK-JS-ANGULAR-3373044
Third Party Advisory
Exploit
https://stackblitz.com/edit/angularjs-vulnerability-angular-copy-redos
Third Party Advisory
Exploit
https://lists.debian.org/debian-lts-announce/2025/07/msg00005.html