CVE-2023-24495

A Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper validation of session & user-accessible input data. A privileged, authenticated remote attacker could interact with external and internal services covertly.
References
Link Resource
https://www.tenable.com/security/tns-2023-03 Patch Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*

Information

Published : 2023-01-26 09:18

Updated : 2023-02-06 06:47


NVD link : CVE-2023-24495

Mitre link : CVE-2023-24495

Products Affected
No products.
CWE
CWE-918

Server-Side Request Forgery (SSRF)