CVT Deployment 1.111.0-1

Summary

The latest update to the Fusion scan engine that powers our internal and external vulnerability scanning is now available. Enjoy!

New Vulnerability Test Highlights

Some of the more interesting vulnerability tests we added recently are as follows:

Atlassian Jira

• Atlassian Jira jQuery Cross-Site Scripting (CVE-2020-11022, CVE-2020-11023)
• Atlassian Jira JQL Regular Expression Denial of Service (CVE-2017-18214)
• Atlassian Jira PieChart gadget Cross Site Scripting (CVE-2017-16863)
• Atlassian Jira Trello importer Server Side Request Forgery (SSRF) (CVE-2017-16865)
• Atlassian Jira Underscore template Code Injection (CVE-2021-23358)
• Atlassian Gadgets DNS Lookup and Arbitrary Service Request Vulnerability (CVE-2020-36232)
• Atlassian jira OAuth plugin allows arbitrary HTTP requests to be proxied (CVE-2017-9506)

AngularJS

• AngularJS $resource ReDoS (CVE-2023-26117)
• AngularJS angular.copy() ReDOS (CVE-2023-26116)
• AngularJS Cross Site Scripting vulnerability (CVE-2019-14863)
• AngularJS inputurl ReDoS (CVE-2023-26118)
• AngularJS merge Prototype Pollution (CVE-2019-10768)
• AngularJS Regex Denial of Service (CVE-2022-25844)
• AngularJS regex-based input Cross Site Scripting vulnerability (CVE-2020-7676)
• AngularJS textarea Cross Site Scripting (CVE-2022-25869)
• Atlassian Gadgets DNS Lookup and Arbitrary Service Request Vulnerability (CVE-2020-36232)
• Atlassian jira OAuth plugin allows arbitrary HTTP requests to be proxied (CVE-2017-9506)

Drupal

• Drupal Datepicker jQuery Cross Site Scripting (CVE-2021-41183)
• Drupal jQuery Cross Site Scripting (CVE-2021-41182)

jQuery

• jQuery Object.prototype Cross Site Scripting (CVE-2019-11358)

OpenSSH

• OpenSSH CRLF Injection Vulnerability (CVE-2016-3115)
• OpenSSH kex_input_kexinit Denial Of Service (CVE-2016-8858)
• OpenSSH metacharacters Command Injection (CVE-2023-51385)
• OpenSSH mm_answer_authpassword Row Hammer Authentication Bypass (CVE-2023-51767)
• OpenSSH ssh-agent Untrusted search path vulnerability (CVE-2016-10009)

PHP

• PHP Integer Overflow in rawurlencode (CVE-2016-4070)
• PHP preg_replace Arbitrary Code Execution (CVE-2018-19520)
• PHP ziparchive extractto traversal (CVE-2021-21706)

Spring Framework

• Spring Framework MVC Directory Traversal (CVE-2018-1271)

WordPress

• Wordpress comment-template.php Information Disclosure (CVE-2020-25286)
• WordPress Core wp_lang Parameter Directory Traversal (CVE-2023-2745)
• Wordpress Exposure of Sensitive Information (CVE-2023-39999)
• Wordpress wp_crop_image Path Traversal (CVE-2019-8943)

How to Update?

All VikingCloud customers using the Fusion Scan Engine receive the updates automatically as soon as an update is available. No action is required.