Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-24494 EUVD-2023-28512GHSA-g876-h7xc-h9pv

A stored cross-site scripting (XSS) vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning i…

Published Jan 25, 2023 · Updated Apr 1, 2025 · Assigned by tenable

Description

A stored cross-site scripting (XSS) vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this by convincing a user to click a specially crafted URL, to execute arbitrary script code in a user's browser session.

Affected products

VendorProductAffectedFixed
— Tenable.sc Tenable.sc versions 5.23.1 and earlier —

References