← CVE Intelligence

CVE-2024-3232

Formula Injection Vulnerability PUBLISHED

Description (CNA)

A formula injection vulnerability exists in Tenable Identity Exposure where an authenticated remote attacker with administrative privileges could manipulate application form fields in order to trick another administrator into executing CSV payloads. - CVE-2024-3232

Affected (CNA)

Vendor / productVersions
Tenable / Tenable Identity Exposureaffected Tenable Identity Exposure 3.42; affected Tenable Identity Exposure 3.29; affected Tenable Identity Exposure 3.19

CWE

CWE-1236

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.