CVE-2023-24494 — n/a / Tenable.sc

Description (CNA)

A stored cross-site scripting (XSS) vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this by convincing a user to click a specially crafted URL, to execute arbitrary script code in a user's browser session.

Affected (CNA)

Vendor / product	Versions
n/a / Tenable.sc	affected Tenable.sc versions 5.23.1 and earlier

CWE

No CWE identifiers supplied.

References

https://www.tenable.com/security/tns-2023-03

ADP enrichment

CVE

No English description supplied.

https://www.tenable.com/security/tns-2023-03

CISA-ADP

No English description supplied.

No references supplied.