An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send crafted wikitext that Utils/WTUtils.php will transform by using a <meta> tag, bypassing sanitization steps, and potentially allowing for XSS.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send
    crafted wikitext that Utils/WTUtils.php will transform by using a <meta> tag, bypassing sanitization
    steps, and potentially allowing for XSS. (CVE-2021-30458)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send     crafted wikitext that Utils/WTUtils.php will transform by using a <meta> tag, bypassing sanitization     steps, and potentially allowing for XSS. (CVE-2021-30458)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-202107-40 (MediaWiki: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MediaWiki. Please       review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Type	Severity
433756	SCA: security update for wikimedia/parsoid (GHSA-5pqx-77vf-85rw)	Tenable Cloud Security	SCA Checks	Local	medium
433756	SCA: security update for wikimedia/parsoid (GHSA-5pqx-77vf-85rw)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
244391	Linux Distros Unpatched Vulnerability : CVE-2021-30458	Nessus	Misc.	Local	medium
156986	GLSA-202107-40 : MediaWiki: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high

Detections

Analytics

CVE-2021-30458

medium

Tenable Plugins

medium

medium

medium

high