Lucene search

PRIOn knowledge basePRION:CVE-2023-24495

HistoryJan 26, 2023 - 9:18 p.m.

Server side request forgery (ssrf)

2023-01-2621:18:00

PRIOn knowledge base

www.prio-n.com

ssrf

tenable.sc

improper validation

session

user-accessible input

attacker

external services

internal services

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.7%

JSON

A Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper validation of session & user-accessible input data. A privileged, authenticated remote attacker could interact with external and internal services covertly.

CPENameOperatorVersion
tenable.scle5.23.1

CPE	Name	Operator	Version
	tenable.sc	le	5.23.1

References

www.tenable.com/security/tns-2023-03