exploitDog

CVE-2023-5624

Опубликовано: 26 окт. 2023

Источник: nvd

CVSS3: 7.2

EPSS Низкий

Описание

Under certain conditions, Nessus Network Monitor was found to not properly enforce input validation. This could allow an admin user to alter parameters that could potentially allow a blindSQL injection.

Ссылки

https://www.tenable.com/security/tns-2023-34
Patch
Vendor Advisory
https://www.tenable.com/security/tns-2023-34
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tenable:nessus_network_monitor:*:*:*:*:*:*:*:*

Версия до 6.3.0 (исключая)

EPSS

Процентиль: 25%

0.00086

Низкий

7.2 High

CVSS3

Дефекты

CWE-20

CWE-20

Связанные уязвимости

GHSA-x5jj-693v-79pc

CVSS3: 7.2

github

больше 2 лет назад

Under certain conditions, Nessus Network Monitor was found to not properly enforce input validation. This could allow an admin user to alter parameters that could potentially allow a blindSQL injection.

EPSS

Процентиль: 25%

0.00086

Низкий

7.2 High

CVSS3

Дефекты

CWE-20

CWE-20