CVE-2023-5624: Blind SQL Injection

Record summary

CVE-2023-5624 has a selected CVSS score of 7.2 (high).

Description

Under certain conditions, Nessus Network Monitor was found to not properly enforce input validation. This could allow an admin user to alter parameters that could potentially allow a blindSQL injection.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableNo

Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 9, 2024 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
Nessus Network Monitor Browse Tenable / Nessus Network Monitor Default status: affected, unknown	CVE List	Before 6.3.0	affected

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2023-5624

tenable.com

https://www.tenable.com/security/tns-2023-34