The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-9d655503ea advisory.

  - Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before     1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
    (CVE-2010-5312)

  - Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject     arbitrary web script or HTML via the closeText parameter of the dialog function. (CVE-2016-7103)

  - jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of     the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The     issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a     CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.
    (CVE-2021-41182)

  - jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of     various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The     issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as     pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted     sources. (CVE-2021-41183)

  - jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of     the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is     fixed in jQuery UI 1.13.0. Any string value passed to the `of` option is now treated as a CSS selector. A     workaround is to not accept the value of the `of` option from untrusted sources. (CVE-2021-41184)

  - Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be     vulnerable to improper input validation. This could allow an attacker to inject disallowed values or     overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter critical or     sensitive data. (CVE-2022-25271)

  - In some situations, the Image module does not correctly check access to image files not stored in the     standard public files directory when generating derivative images using the image styles system. Access to     a non-public file is checked only if it is stored in the private file system. However, some contributed     modules provide additional file systems, or schemes, which may lead to this vulnerability. This     vulnerability is mitigated by the fact that it only applies when the site sets (Drupal 9)     $config['image.settings']['allow_insecure_derivatives'] or (Drupal 7)     $conf['image_allow_insecure_derivatives'] to TRUE. The recommended and default setting is FALSE, and     Drupal core does not provide a way to change that in the admin UI. Some sites may require configuration     changes following this security release. Review the release notes for your Drupal version if you have     issues accessing files or image styles after updating. (CVE-2022-25275)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Fedora 36 : drupal7 (2022-9d655503ea)

high Nessus Plugin ID 169174

Version 1.3