The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:1591 advisory.

  - Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the     magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the     real global object. (CVE-2023-28154)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Rocky Linux 9 : pcs (RLSA-2023:1591)

critical Nessus Plugin ID 173988

Version 1.0