Vulnerability Details CVE-2022-25844
The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service (ReDoS) by providing a custom locale rule that makes it possible to assign the parameter in posPre: ' '.repeat() of NUMBER_FORMATS.PATTERNS[1].posPre with a very high value. **Note:** 1) This package has been deprecated and is no longer maintained. 2) The vulnerable versions are 1.7.0 and higher.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.047
EPSS Ranking 90.6%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
Products affected by CVE-2022-25844
-
cpe:2.3:a:angularjs:angularjs:1.7.0
-
cpe:2.3:a:angularjs:angularjs:1.7.1
-
cpe:2.3:a:angularjs:angularjs:1.7.2
-
cpe:2.3:a:angularjs:angularjs:1.7.3
-
cpe:2.3:a:angularjs:angularjs:1.7.4
-
cpe:2.3:a:angularjs:angularjs:1.7.5
-
cpe:2.3:a:angularjs:angularjs:1.7.6
-
cpe:2.3:a:angularjs:angularjs:1.7.7
-
cpe:2.3:a:angularjs:angularjs:1.7.8
-
cpe:2.3:a:angularjs:angularjs:1.7.9
-
cpe:2.3:a:angularjs:angularjs:1.8.0
-
cpe:2.3:a:angularjs:angularjs:1.8.1
-
cpe:2.3:a:angularjs:angularjs:1.8.2
-
cpe:2.3:a:angularjs:angularjs:1.8.3
-
cpe:2.3:a:angularjs:angularjs:10.0.0
-
cpe:2.3:a:angularjs:angularjs:10.1.0
-
cpe:2.3:a:angularjs:angularjs:10.2.5
-
cpe:2.3:a:angularjs:angularjs:11.0.0
-
cpe:2.3:a:angularjs:angularjs:11.1.0
-
cpe:2.3:a:angularjs:angularjs:11.2.0
-
cpe:2.3:a:angularjs:angularjs:12.0.0
-
cpe:2.3:a:angularjs:angularjs:12.1.0
-
cpe:2.3:a:angularjs:angularjs:12.2.0
-
cpe:2.3:a:angularjs:angularjs:13.0.0
-
cpe:2.3:a:angularjs:angularjs:13.1.0
-
cpe:2.3:a:angularjs:angularjs:13.2.0
-
cpe:2.3:a:angularjs:angularjs:13.3.0
-
cpe:2.3:a:angularjs:angularjs:14.0.0
-
cpe:2.3:a:angularjs:angularjs:14.1.0
-
cpe:2.3:a:angularjs:angularjs:14.2.0
-
cpe:2.3:a:angularjs:angularjs:15.0.0
-
cpe:2.3:a:angularjs:angularjs:15.1.0
-
cpe:2.3:a:angularjs:angularjs:15.2.0
-
cpe:2.3:a:angularjs:angularjs:16.0.0
-
cpe:2.3:a:angularjs:angularjs:16.1.0
-
cpe:2.3:a:angularjs:angularjs:16.2.0
-
cpe:2.3:a:angularjs:angularjs:17.0.0
-
cpe:2.3:a:angularjs:angularjs:17.1.0
-
cpe:2.3:a:angularjs:angularjs:17.2.0
-
cpe:2.3:a:angularjs:angularjs:17.3.0
-
cpe:2.3:a:angularjs:angularjs:18.0.0
-
cpe:2.3:a:angularjs:angularjs:18.1.0
-
cpe:2.3:a:angularjs:angularjs:18.2.0
-
cpe:2.3:a:angularjs:angularjs:18.2.14
-
cpe:2.3:a:angularjs:angularjs:19.0.0
-
cpe:2.3:a:angularjs:angularjs:19.1.0
-
cpe:2.3:a:angularjs:angularjs:19.2.0
-
cpe:2.3:a:angularjs:angularjs:19.2.18
-
cpe:2.3:a:angularjs:angularjs:19.2.19
-
cpe:2.3:a:angularjs:angularjs:19.2.20
-
cpe:2.3:a:angularjs:angularjs:19.2.21
-
cpe:2.3:a:angularjs:angularjs:19.2.22
-
cpe:2.3:a:angularjs:angularjs:19.2.23
-
cpe:2.3:a:angularjs:angularjs:19.2.24
-
cpe:2.3:a:angularjs:angularjs:19.2.25
-
cpe:2.3:a:angularjs:angularjs:2.0.0
-
cpe:2.3:a:angularjs:angularjs:2.1.0
-
cpe:2.3:a:angularjs:angularjs:2.2.0
-
cpe:2.3:a:angularjs:angularjs:2.3.0
-
cpe:2.3:a:angularjs:angularjs:2.4.0
-
cpe:2.3:a:angularjs:angularjs:20.0.0
-
cpe:2.3:a:angularjs:angularjs:20.1.0
-
cpe:2.3:a:angularjs:angularjs:20.2.0
-
cpe:2.3:a:angularjs:angularjs:20.3.0
-
cpe:2.3:a:angularjs:angularjs:20.3.16
-
cpe:2.3:a:angularjs:angularjs:20.3.17
-
cpe:2.3:a:angularjs:angularjs:20.3.18
-
cpe:2.3:a:angularjs:angularjs:20.3.19
-
cpe:2.3:a:angularjs:angularjs:20.3.20
-
cpe:2.3:a:angularjs:angularjs:20.3.21
-
cpe:2.3:a:angularjs:angularjs:20.3.22
-
cpe:2.3:a:angularjs:angularjs:20.3.23
-
cpe:2.3:a:angularjs:angularjs:20.3.24
-
cpe:2.3:a:angularjs:angularjs:20.3.25
-
cpe:2.3:a:angularjs:angularjs:21.0.0
-
cpe:2.3:a:angularjs:angularjs:21.0.4
-
cpe:2.3:a:angularjs:angularjs:21.0.5
-
cpe:2.3:a:angularjs:angularjs:21.0.6
-
cpe:2.3:a:angularjs:angularjs:21.0.7
-
cpe:2.3:a:angularjs:angularjs:21.0.8
-
cpe:2.3:a:angularjs:angularjs:21.0.9
-
cpe:2.3:a:angularjs:angularjs:21.1.0
-
cpe:2.3:a:angularjs:angularjs:21.1.1
-
cpe:2.3:a:angularjs:angularjs:21.1.2
-
cpe:2.3:a:angularjs:angularjs:21.1.3
-
cpe:2.3:a:angularjs:angularjs:21.1.4
-
cpe:2.3:a:angularjs:angularjs:21.1.5
-
cpe:2.3:a:angularjs:angularjs:21.1.6
-
cpe:2.3:a:angularjs:angularjs:21.2.0
-
cpe:2.3:a:angularjs:angularjs:21.2.1
-
cpe:2.3:a:angularjs:angularjs:21.2.10
-
cpe:2.3:a:angularjs:angularjs:21.2.11
-
cpe:2.3:a:angularjs:angularjs:21.2.12
-
cpe:2.3:a:angularjs:angularjs:21.2.13
-
cpe:2.3:a:angularjs:angularjs:21.2.14
-
cpe:2.3:a:angularjs:angularjs:21.2.15
-
cpe:2.3:a:angularjs:angularjs:21.2.16
-
cpe:2.3:a:angularjs:angularjs:21.2.17
-
cpe:2.3:a:angularjs:angularjs:21.2.2
-
cpe:2.3:a:angularjs:angularjs:21.2.3
-
cpe:2.3:a:angularjs:angularjs:21.2.4
-
cpe:2.3:a:angularjs:angularjs:21.2.5
-
cpe:2.3:a:angularjs:angularjs:21.2.6
-
cpe:2.3:a:angularjs:angularjs:21.2.7
-
cpe:2.3:a:angularjs:angularjs:21.2.8
-
cpe:2.3:a:angularjs:angularjs:21.2.9
-
cpe:2.3:a:angularjs:angularjs:22.0.0
-
cpe:2.3:a:angularjs:angularjs:22.0.1
-
cpe:2.3:a:angularjs:angularjs:22.0.2
-
cpe:2.3:a:angularjs:angularjs:22.1.0
-
cpe:2.3:a:angularjs:angularjs:4.0.0
-
cpe:2.3:a:angularjs:angularjs:4.1.0
-
cpe:2.3:a:angularjs:angularjs:4.2.0
-
cpe:2.3:a:angularjs:angularjs:4.3.0
-
cpe:2.3:a:angularjs:angularjs:4.4.0
-
cpe:2.3:a:angularjs:angularjs:5.0.0
-
cpe:2.3:a:angularjs:angularjs:5.1.0
-
cpe:2.3:a:angularjs:angularjs:5.2.0
-
cpe:2.3:a:angularjs:angularjs:6.0.0
-
cpe:2.3:a:angularjs:angularjs:6.1.0
-
cpe:2.3:a:angularjs:angularjs:7.0.0
-
cpe:2.3:a:angularjs:angularjs:7.1.0
-
cpe:2.3:a:angularjs:angularjs:7.2.0
-
cpe:2.3:a:angularjs:angularjs:8.0.0
-
cpe:2.3:a:angularjs:angularjs:8.1.0
-
cpe:2.3:a:angularjs:angularjs:8.2.0
-
cpe:2.3:a:angularjs:angularjs:9.0.0
-
cpe:2.3:a:angularjs:angularjs:9.1.0
-
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-
-
cpe:2.3:o:fedoraproject:fedora:35
-
cpe:2.3:o:fedoraproject:fedora:36