Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-26116
HistoryMar 30, 2023 - 5:15 a.m.

Design/Logic Flaw

2023-03-3005:15:00
PRIOn knowledge base
www.prio-n.com
39
version 1.2.21
angular package
regular expression denial of service
redos
logic flaw
nvd

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.

CPENameOperatorVersion
angularge1.2.21
angularle1.8.3
fedoraeq38

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%