p PatchFirst

CVE-2023-26117

CVE-2023-26117

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.

CVSS 5.3 · Medium · EPSS 1.7% · Fix available

Published
Updated

Stack: system · node

Affected products and versions

  • angular

    Versions
    • ≥ 1.0.0: Affected (semver)

    No fix published

  • org.webjars.bower:angular

    Versions
    • ≥ 1.0.0: Affected (semver)

    No fix published

  • org.webjars.npm:angular

    Versions
    • ≥ 1.0.0: Affected (semver)

    No fix published

  • org.webjars.bowergithub.angular:angular

    Versions
    • ≥ 0: Affected (semver)

    No fix published

  • angular.js Debian:12

    Versions
    • 1.8.3-1
    • 1.8.3-1+deb12u1~deb11u1
    Affected ranges
    • ECOSYSTEM: < 1.8.3-1+deb12u1

    Update to 1.8.3-1+deb12u1

  • angular.js Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.8.3-2

    Update to 1.8.3-2

  • angular npm

    Affected ranges
    • SEMVER: ≤ 1.8.3

    No fix published

  • angular.js Ubuntu:Pro:16.04:LTS

    Versions
    • 1.2.28-1ubuntu2
    Affected ranges
    • ECOSYSTEM: < 1.2.28-1ubuntu2+esm1

    Update to 1.2.28-1ubuntu2+esm1

  • angular.js Ubuntu:Pro:18.04:LTS

    Versions
    • 1.5.10-1
    Affected ranges
    • ECOSYSTEM: < 1.5.10-1ubuntu0.1~esm1

    Update to 1.5.10-1ubuntu0.1~esm1

  • angular.js Ubuntu:Pro:20.04:LTS

    Versions
    • 1.5.10-1
    • 1.7.9-1
    Affected ranges
    • ECOSYSTEM: < 1.7.9-1ubuntu0.1~esm1

    Update to 1.7.9-1ubuntu0.1~esm1

  • angular.js Ubuntu:22.04:LTS

    Versions
    • 1.8.2-2
    Affected ranges
    • ECOSYSTEM: < 1.8.2-2ubuntu0.1

    Update to 1.8.2-2ubuntu0.1

  • angular.js Ubuntu:24.04:LTS

    Versions
    • 1.8.3-1
    Affected ranges
    • ECOSYSTEM: < 1.8.3-1ubuntu0.24.04.1

    Update to 1.8.3-1ubuntu0.24.04.1

Original sources

Check your server →