The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6841-1 advisory.

    It was discovered that PHP could early return in the filter_var function resulting in invalid user     information being treated as valid user information. An attacker could possibly use this issue to expose     raw user input information.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : PHP vulnerability (USN-6841-1)

medium Nessus Plugin ID 200740

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Aug 28, 2024, 7:43 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202408281943
Version 1.2 Jun 21, 2024, 2:16 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202406211416
Version 1.1 Jun 19, 2024, 5:41 PM New Plugin Feed: 202406191741