Cross-site scripting (XSS) vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment.

perl-HTML-Scrubber-0.15-1.fc21 - update to 0.15 perl-HTML- Scrubber-0.15-1.fc22 - update to 0.15 perl-HTML-Scrubber-0.15-1.fc23 - update to 0.15

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

MITRE reports :

Cross-site scripting (XSS) vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment.

HTML::Scrubber is vulnerable to a cross-site scripting (XSS) vulnerability when the comment feature is enabled. It allows remote attackers to inject arbitrary web script or HTML via a crafted comment.

For Debian 6 squeeze, this has been fixed in libhtml-scrubber-perl version 0.08-4+deb6u1.

Cheers,

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
89471	Fedora 21 : perl-HTML-Scrubber-0.15-1.fc21 (2015-fed35dffd7)	Nessus	Fedora Local Security Checks	low
89329	Fedora 22 : perl-HTML-Scrubber-0.15-1.fc22 (2015-95f5ff8d44)	Nessus	Fedora Local Security Checks	low
89306	Fedora 23 : perl-HTML-Scrubber-0.15-1.fc23 (2015-84a95e39d4)	Nessus	Fedora Local Security Checks	low
87355	Amazon Linux AMI : perl-HTML-Scrubber (ALAS-2015-629)	Nessus	Amazon Linux Local Security Checks	low
86834	FreeBSD : p5-HTML-Scrubber -- XSS vulnerability (2f7f4db2-8819-11e5-ab94-002590263bf5)	Nessus	FreeBSD Local Security Checks	low
86712	Debian DLA-339-1 : libhtml-scrubber-perl security update	Nessus	Debian Local Security Checks	low

Detections

Analytics

CVE-2015-5667

medium

Tenable Plugins

low

low

low

low

low

low