The vulnerability of the simpleupload.py script in the Tenable Appliance web interface allows a hacker to execute arbitrary commands.

The vulnerability of the simpleupload.py script in the Tenable Appliance web interface is related to the lack of data cleaning at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using the tnsappliancesessionuser parameter...