Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Angular Inefficient Regular Expression Complexity Vulnerability - CVE-2024-21490 - Vulnerability Database
Angular

Angular Inefficient Regular Expression Complexity Vulnerability - CVE-2024-21490

High
Reference: CVE-2024-21490
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-21490
Title: Angular Inefficient Regular Expression Complexity Vulnerability
Overview:

This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input this can result in catastrophic backtracking and cause a denial of service. br/br/strongNote:/strongbr/br/This package is EOL and will not receive any updates to address this issue. Users should migrate to a hrefhttps://www.npmjs.com/package/angular/coreangular/core/a.