It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1519 advisory.

    jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request     is performed without the dataType option, causing text/javascript responses to be executed.
    (CVE-2015-9251)

    In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target     attribute, a different vulnerability thanCVE-2018-14041. (CVE-2016-10735)

    In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute. (CVE-2018-14040)

    In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip. (CVE-2018-14042)

    In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute. (CVE-2018-20676)

    In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property. (CVE-2018-20677)

    A Prototype Pollution vulnerability was found in jquery. Untrusted JSON passed to the `extend` function     could lead to modifying objects up the prototype chain, including the global Object. A crafted JSON object     passed to a vulnerable method could lead to denial of service or data injection, with various     consequences. (CVE-2019-11358)

    A cross-site scripting vulnerability was discovered in bootstrap. If an attacker could control the data     given to tooltip or popover, they could inject HTML or Javascript into the rendered page when tooltip or     popover events fired. (CVE-2019-8331)

    A Cross-site scripting (XSS) vulnerability exists in JQuery. This flaw allows an attacker with the ability     to supply input to the 'HTML' function to inject Javascript into the page where that input is rendered,     and have it delivered by the browser. (CVE-2020-11022)

    A flaw was found in IPA. When sending a very long password (>= 1,000,000 characters) to the server, the     password hashing process could exhaust memory and CPU leading to a denial of service and the website     becoming unresponsive. The highest threat from this vulnerability is to system availability.
    (CVE-2020-1722)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : ipa (ALAS-2020-1519)

medium Nessus Plugin ID 141974

Version 1.6

Version 1.5

Version 1.4

Version 1.6 Dec 17, 2024, 9:25 AM Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202412170925
Version 1.5 Dec 12, 2024, 9:55 AM CVE (set "CVE" coverage to "CVE-2015-9251,CVE-2016-10735,CVE-2018-14040,CVE-2018-14042,CVE-2018-20676,CVE-2018-20677,CVE-2019-8331,CVE-2019-11358,CVE-2020-1722,CVE-2020-11022") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Exploit attributes ("Exploitability ease" changed from "Exploits are available" to "No known exploits are available") Plugin metadata Plugin Feed: 202412120955
Version 1.4 Dec 6, 2022, 6:53 AM Reference Plugin Feed: 202212060653