Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: snyk

Published: 2023-03-30T05:00:01.348Z

Updated: 2024-08-02T11:39:06.639Z

Reserved: 2023-02-20T10:28:48.923Z

Link: CVE-2023-26117

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-03-30T05:15:07.687

Modified: 2024-11-21T07:50:48.630

Link: CVE-2023-26117

cve-icon Redhat

Severity : Moderate

Publid Date: 2023-03-30T00:00:00Z

Links: CVE-2023-26117 - Bugzilla