Security Vulnerability Testing

[abhilash.kumar.niit]

Hi i have got the ESPO CRM testing done by "Nessus " software to see the vulnerability. which has identified the below issues.

Issue Name	Recommendation
Misconfigured Content Security Policy (CSP) Header	It is recommended to:
Outdated Components Running on Application	It is recommended to update Bootstrap to 5.3, and Apache 2.4.65 or more, and also keep the services up to date by applying regular patches.

i want to know if there is any way to fic this issue?

[yuri]

Hi,

I recommend to ignore them, except upgrading the apache.

[abhilash.kumar.niit]

Hi Yuri,

this is coming in the Nessus software so ignoring this for me would not be easy.
Is there any way to resolve this or is there aby way to exclude this from the scanning.