Detections
Analytics
Alpine: multiple drupal7 packages: security update to 7.65-r0 (deprecated)
medium Tenable Cloud Security Plugin ID 400517
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true,
{}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable
__proto__ property, it could extend the native Object.prototype. (CVE-2019-11358)
See Also
https://git.alpinelinux.org/aports/commit/?id=2f317d829d4ea7906e1866adc9b68d5623254e50
https://git.alpinelinux.org/aports/commit/?id=87800be0f5a83903722d252e180638f2cd41913b
Plugin Details
Severity: Medium
ID: 400517
Version: Revision 1.33
Type: Local
Published: 8/16/2023
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 5
Percentile: 94.39
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.6
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS Score Source: CVE-2019-11358
CVSS v3
Risk Factor: Medium
Base Score: 6.1
Temporal Score: 5.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 5/5/2019
Vulnerability Publication Date: 4/9/2019
Reference Information
CVE: CVE-2019-11358
BID: 108023