The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6599-1 advisory.

    Yeting Li discovered that Jinja incorrectly handled certain regex. An attacker could possibly use this     issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, and     Ubuntu 20.04 LTS. (CVE-2020-28493)

    It was discovered that Jinja incorrectly handled certain HTML passed with xmlatter filter. An attacker     could inject arbitrary HTML attributes keys and values potentially leading to XSS. (CVE-2024-22195)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.10 : Jinja2 vulnerabilities (USN-6599-1)

medium Nessus Plugin ID 189537

Version 1.1