CVE-2023-0476

概要

参考情報

• tenable.com/security/tns-2023-03 · Patch

tenable.sc のその他の脆弱性

• CVE-2023-24495中 6.5A Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper validation of session & user-accessible input data. …
• CVE-2023-24494中 5.4A stored cross-site scripting (XSS) vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it…
• CVE-2023-24493中 5.7A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An au…
• CVE-2022-24828高 8.8Composer is a dependency manager for the PHP programming language. Integrators using Composer code to call `VcsDriver::getFileContent` can h…
• CVE-2022-24785高 7.5Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts n…