Sanitize is an allowlist-based HTML and CSS sanitizer. Versions 5.0.0 and later, prior to 6.0.1, are vulnerable to Cross-site Scripting. When Sanitize is configured with a custom allowlist that allows `noscript` elements, attackers are able to include arbitrary HTML, resulting in XSS (cross-site scripting) or other undesired behavior when that HTML is rendered in a browser. The default configurations do not allow `noscript` elements and are not vulnerable. This issue only affects users who are using a custom config that adds `noscript` to the element allowlist. This issue has been patched in version 6.0.1. Users who are unable to upgrade can prevent this issue by using one of Sanitize's default configs or by ensuring that their custom config does not include `noscript` in the element allowlist.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Sanitize is an allowlist-based HTML and CSS sanitizer. Versions 5.0.0 and later, prior to 6.0.1, are     vulnerable to Cross-site Scripting. When Sanitize is configured with a custom allowlist that allows     `noscript` elements, attackers are able to include arbitrary HTML, resulting in XSS (cross-site scripting)     or other undesired behavior when that HTML is rendered in a browser. The default configurations do not     allow `noscript` elements and are not vulnerable. This issue only affects users who are using a custom     config that adds `noscript` to the element allowlist. This issue has been patched in version 6.0.1. Users     who are unable to upgrade can prevent this issue by using one of Sanitize's default configs or by ensuring     that their custom config does not include `noscript` in the element allowlist. (CVE-2023-23627)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Sanitize is an allowlist-based HTML and CSS sanitizer. Versions 5.0.0 and later, prior to 6.0.1, are
    vulnerable to Cross-site Scripting. When Sanitize is configured with a custom allowlist that allows
    `noscript` elements, attackers are able to include arbitrary HTML, resulting in XSS (cross-site scripting)
    or other undesired behavior when that HTML is rendered in a browser. The default configurations do not
    allow `noscript` elements and are not vulnerable. This issue only affects users who are using a custom
    config that adds `noscript` to the element allowlist. This issue has been patched in version 6.0.1. Users
    who are unable to upgrade can prevent this issue by using one of Sanitize's default configs or by ensuring
    that their custom config does not include `noscript` in the element allowlist. (CVE-2023-23627)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6748-1 advisory.

    It was discovered that Sanitize incorrectly handled noscript elements under certain circumstances. An     attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. This issue only     affected Ubuntu 22.04 LTS. (CVE-2023-23627)

    It was discovered that Sanitize incorrectly handled style elements under certain circumstances. An     attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. (CVE-2023-36823)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
226777	Linux Distros Unpatched Vulnerability : CVE-2023-23627	Nessus	Misc.	medium
414721	SCA: security update for sanitize (GHSA-fw3g-2h3j-qmm7)	Tenable Cloud Security	SCA Checks	medium
414721	SCA: security update for sanitize (GHSA-fw3g-2h3j-qmm7)	Tenable Self-Hosted Container Security	SCA Checks	medium
193803	Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : Sanitize vulnerabilities (USN-6748-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2023-23627

medium

Tenable Plugins

medium

medium

medium

medium