Nessus Web UI Scanned Content Stored XSS

Medium Nessus Plugin ID 88965

Synopsis

A web server running on the remote host is affected by a cross-site scripting vulnerability.

Description

According to its self-reported version number, the Nessus web server running on the remote host is affected by a cross-site scripting vulnerability in the web-based user interface (Web UI) due to improper validation of input passed from plugins before returning it users. A remote attacker can exploit this, via a specially crafted request, to execute arbitrary script code in a user's browser session.

Solution

Upgrade the plugin feed using 'nessus-update-plugins', restart the web server, and verify Nessus Web UI version 2.3.4 (#85) or later is running. The Web UI version can be viewed by logging in and clicking the 'About' button.

See Also

https://www.tenable.com/security/tns-2014-08

https://www.thesecurityfactory.be/permalink/nessus-stored-xss.html

Plugin Details

Severity: Medium

ID: 88965

File Name: nessus_web_ui_stored_xss.nasl

Version: $Revision: 1.6 $

Type: remote

Published: 2016/02/25

Modified: 2017/03/03

Dependencies: 10147

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 4

Temporal Score: 3.1

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:N

Temporal Vector: CVSS2#E:POC/RL:OF/RC:ND

CVSSv3

Base Score: 4.1

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N

Vulnerability Information

CPE: cpe:/a:tenable:nessus

Required KB Items: installed_sw/nessus

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2014/06/13

Vulnerability Publication Date: 2014/10/07

Reference Information

CVE: CVE-2014-7280

BID: 70274

EDB-ID: 34929