Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2. (CVE-2022-0436)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3386 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3386-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                           Chris Lamb     April 06, 2023                                https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : grunt     Version        : 1.0.1-8+deb10u3     CVE ID         : CVE-2022-0436     Debian Bug     : 1009676

    It was discovered that there was a potential path-traversal     vulnerability in GruntJS, a multipurpose task runner and build     system tool. This could have been exploited via malicious symlinks.

    For Debian 10 buster, this problem has been fixed in version     1.0.1-8+deb10u3.

    We recommend that you upgrade your grunt packages.

    For the detailed security status of grunt please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/grunt

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 ESM / 20.04 ESM / 22.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5847-1 advisory.

    It was discovered that Grunt was not properly loading YAML files before parsing them. An attacker could     possibly use this issue to execute arbitrary code. (CVE-2020-7729)

    It was discovered that Grunt was not properly handling symbolic links when performing file copy     operations. An attacker could possibly use this issue to expose sensitive information or execute arbitrary     code. (CVE-2022-0436)

    It was discovered that there was a race condition in the Grunt file copy function, which could lead to an     arbitrary file write. An attacker could possibly use this issue to perform a local privilege escalation     attack or to execute arbitrary code. (CVE-2022-1537)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
256755	Linux Distros Unpatched Vulnerability : CVE-2022-0436	Nessus	Misc.	medium
173979	Debian dla-3386 : grunt - security update	Nessus	Debian Local Security Checks	medium
171105	Ubuntu 18.04 ESM / 20.04 ESM / 22.04 ESM : Grunt vulnerabilities (USN-5847-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2022-0436

medium

Tenable Plugins

medium

medium

high