There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that
    contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be
    shadowed by attacker-injected HTML elements. (CVE-2024-53382)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 1.29.0 之前的 Prism (即 PrismJS) 允許 DOM 破壞 (對於包含 HTML 但不直接包含 JavaScript 的不受信任輸入造成 XSS 攻擊)因為 document.currentScript 查閱會遭到攻擊者插入的 HTML 元素遮蔽。 (CVE-2024-53382)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Prism又称为 PrismJS通过 1.29.0 允许 DOM 破坏包含 HTML 但不直接包含 JavaScript 的不受信任输入的 XSS 导致 document.currentScript 查找可能被攻击者注入的 HTML 元素遮蔽。 (CVE-2024-53382)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 1.29.0 までの Prism別名 PrismJSは、document.currentScript 検索が攻撃者が注入した HTML 要素によってシャドー化されるため、DOM クローブリングHTML を含むが JavaScript は直接含まない信頼できない入力に対する結果 XSS を引き起こす可能性があります。CVE-2024-53382

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0603 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-5889:
    A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0. It has been     rated as problematic. Affected by this issue is the function expand of the file index.js. The manipulation     leads to inefficient regular expression complexity. The attack may be launched remotely. The complexity of     an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the     public and may be used. Upgrading to version 1.1.12, 2.0.2, 3.0.1 and 4.0.1 is able to address this issue.
    The name of the patch is a5b98a4f30d7813266b221435e1eaaf25a1b0ac5. It is recommended to upgrade the     affected component.

    CVE-2024-53382:
    axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute     URLs rather than protocol-relative URLs to axios. Even if baseURL is set, axios sends the request to     the specified absolute URL, potentially causing SSRF and credential leakage. This issue impacts both     server-side and client-side usage of axios. This issue is fixed in 1.8.2.

    CVE-2025-27152:
    Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that     contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be     shadowed by attacker-injected HTML elements.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that     contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be     shadowed by attacker-injected HTML elements. (CVE-2024-53382)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
421254	SCA: security update for prismjs (GHSA-x7hr-w5r2-h6wg)	Tenable Cloud Security	SCA Checks	2025/3/28	2026/7/2	medium
421254	SCA: security update for prismjs (GHSA-x7hr-w5r2-h6wg)	Tenable Self-Hosted Container Security	SCA Checks	2025/3/28	2026/7/2	medium
232109	Linux Distros 未修補的弱點：CVE-2024-53382	Nessus	Misc.	2025/3/6	2026/6/28	medium
232109	Linux Distros 未修补的漏洞：CVE-2024-53382	Nessus	Misc.	2025/3/6	2026/6/28	medium
232109	Linux Distros のパッチ未適用の脆弱性: CVE-2024-53382	Nessus	Misc.	2025/3/6	2026/6/28	medium
249977	TencentOS Server 4: grafana (TSSA-2025:0603)	Nessus	Tencent Local Security Checks	2025/8/15	2025/12/4	high
232109	Linux Distros Unpatched Vulnerability : CVE-2024-53382	Nessus	Misc.	2025/3/6	2026/6/28	medium

检测

插件搜索

medium

medium

medium

medium

medium

high

medium