Language:
https://www.drupal.org/sa-core-2021-011
https://ckeditor.com/cke4/release/CKEditor-4.17.0
https://ckeditor.com/cke4/release/CKEditor-4.17.1
https://github.com/ckeditor/ckeditor4
http://www.nessus.org/u?b93a11ed
http://www.nessus.org/u?1789d069
https://www.drupal.org/project/drupal/releases/8.9.20
https://www.drupal.org/project/drupal/releases/9.1.14
https://www.drupal.org/project/drupal/releases/9.2.9
Severity: Medium
ID: 155559
File Name: drupal_9_2_9.nasl
Version: 1.6
Type: remote
Family: CGI abuses
Published: 11/18/2021
Updated: 9/28/2023
Configuration: Enable paranoid mode, Enable thorough checks
Supported Sensors: Nessus
Risk Factor: Low
Score: 3.0
Risk Factor: Low
Base Score: 3.5
Temporal Score: 2.6
Vector: CVSS2#AV:N/AC:M/Au:S/C:N/I:P/A:N
CVSS Score Source: CVE-2021-41165
Risk Factor: Medium
Base Score: 5.4
Temporal Score: 4.7
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CPE: cpe:/a:drupal:drupal
Required KB Items: Settings/ParanoidReport, installed_sw/Drupal
Exploit Ease: No known exploits are available
Patch Publication Date: 11/17/2021
Vulnerability Publication Date: 11/17/2021
CVE: CVE-2021-41164, CVE-2021-41165
IAVA: 2021-A-0559-S