Lucene search

PRIOn knowledge basePRION:CVE-2023-24493

HistoryJan 26, 2023 - 9:18 p.m.

Design/Logic Flaw

2023-01-2621:18:00

PRIOn knowledge base

www.prio-n.com

vulnerability

tenable.sc

formula injection

authenticated attacker

exported reports

victim approval

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.8%

JSON

A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated attacker could leverage the reporting system to export reports containing formulas, which would then require a victim to approve and execute on a host.

CPENameOperatorVersion
tenable.scle5.23.1

CPE	Name	Operator	Version
	tenable.sc	le	5.23.1

References

www.tenable.com/security/tns-2023-03