The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of the < (less than) character in attribute values.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting     (XSS) attacks by leveraging mishandling of the < (less than) character in attribute values.
    (CVE-2016-9909)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting
    (XSS) attacks by leveraging mishandling of the < (less than) character in attribute values.
    (CVE-2016-9909)

ID	Name	Product	Family	Severity
254356	Linux Distros Unpatched Vulnerability : CVE-2016-9909	Nessus	Misc.	medium
419240	SCA: security update for html5lib (GHSA-v9v9-xffq-rwr4)	Tenable Cloud Security	SCA Checks	medium
419240	SCA: security update for html5lib (GHSA-v9v9-xffq-rwr4)	Tenable Self-Hosted Container Security	SCA Checks	medium

Detections

Analytics

CVE-2016-9909

medium

Tenable Plugins

medium

medium

medium