Medium severity6.5NVD Advisory· Published Jan 26, 2023· Updated Jun 17, 2026
CVE-2023-24495
CVE-2023-24495
Description
A Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper validation of session & user-accessible input data. A privileged, authenticated remote attacker could interact with external and internal services covertly.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*range: <=5.23.1
- (no CPE)
- (no CPE)range: Tenable.sc versions 5.23.1 and earlier
Patches
Vulnerability mechanics
References
1- www.tenable.com/security/tns-2023-03nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.