Stored Cross-Site Scripting Vulnerability in Tenable.sc

CVE-2023-24494

What is CVE-2023-24494?

A stored cross-site scripting (XSS) vulnerability has been identified in Tenable.sc due to insufficient validation of user-input. This vulnerability allows an authenticated remote attacker to exploit the system by luring a user into clicking a malicious URL. Once the link is activated, it can lead to the execution of arbitrary script code within the user's browser session, potentially compromising the confidentiality and integrity of user data. Organizations using Tenable.sc should implement security measures to mitigate this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References