Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-24495

No fix known EPSS <1%CVSS 6.5

A Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper validation of session & user-accessible input data. A privileged, authenticated remote attacker could interact with external and internal services covertly.

Published 2023-01-25 · CVE record · OSV

Products: tenable.sc