CVE-2023-24494

 

Published at: - 26-01-2023 10:18

Last modified: - 27-01-2023 03:03

Total changes: - 2

Description

A stored cross-site scripting (XSS) vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this by convincing a user to click a specially crafted URL, to execute arbitrary script code in a user's browser session.

Common Vulnerability Scoring System (CVSS)

-

 

Verification logic

 

Reference

• https://www.tenable.com/security/tns-2023-03

 

Keywords

NVD

 

CVE-2023-24494

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures