Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior     to 2.14.1. (CVE-2022-0323)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior
    to 2.14.1. (CVE-2022-0323)

The version of Moodle installed on the remote host is 3.9.x prior to 3.9.16, 3.11.x prior to 3.11.9 or 4.0.x prior to 4.0.3. It is, therefore, affected by multiple vulnerabilities:

- A vulnerable version of the Mustache template library included in Moodle. (CVE-2022-0323)

- A Cross-Site Request Forgery (CSRF) vulnerability due to the lack of token check when enabling and disabled installed H5P libraries. (CVE-2022-2986)

Note that the scanner has not attempted to exploit this issue but has instead relied only on application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 65847d9d-7f3e-11ec-8624-b42e991fc52e advisory.

  - Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior     to 2.14.1. (CVE-2022-0323)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
262470	Linux Distros Unpatched Vulnerability : CVE-2022-0323	Nessus	Misc.	Local	high
410379	SCA: security update for mustache/mustache (GHSA-4rmr-c2jx-vx27)	Tenable Cloud Security	SCA Checks	Local	high
410379	SCA: security update for mustache/mustache (GHSA-4rmr-c2jx-vx27)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
113599	Moodle 4.0.x < 4.0.3 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	high
113598	Moodle 3.11.x < 3.11.9 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	high
113597	Moodle 3.9.x < 3.9.16 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	high
157236	FreeBSD : mustache - Possible Remote Code Execution (65847d9d-7f3e-11ec-8624-b42e991fc52e)	Nessus	FreeBSD Local Security Checks	Local	high

Detections

Analytics

CVE-2022-0323

high

Tenable Plugins

high

high

high

high

high

high

high