An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

The version of jtidy installed on the remote host is prior to 1.0-0.16.20100930svn1125. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2461 advisory.

  - An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified     impacts via crafted object that uses cyclic dependencies. (CVE-2023-34623)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-478 advisory.

  - An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified     impacts via crafted object that uses cyclic dependencies. (CVE-2023-34623)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3164-1 advisory.

  - An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified     impacts via crafted object that uses cyclic dependencies. (CVE-2023-34623)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3165-1 advisory.

  - An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified     impacts via crafted object that uses cyclic dependencies. (CVE-2023-34623)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3016-1 advisory.

  - An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified     impacts via crafted object that uses cyclic dependencies. (CVE-2023-34623)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
190710	Amazon Linux 2 : jtidy (ALAS-2024-2461)	Nessus	Amazon Linux Local Security Checks	high
187694	Amazon Linux 2023 : jtidy, jtidy-javadoc (ALAS2023-2024-478)	Nessus	Amazon Linux Local Security Checks	high
179301	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : jtidy (SUSE-SU-2023:3164-1)	Nessus	SuSE Local Security Checks	high
179300	SUSE SLES12 Security Update : jtidy (SUSE-SU-2023:3165-1)	Nessus	SuSE Local Security Checks	high
179040	SUSE SLES15 Security Update : jtidy (SUSE-SU-2023:3016-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2023-34623

high

Tenable Plugins

high

high

high

high

high