Nessus 8.10.0 and earlier were found to contain a Stored XSS vulnerability due to improper validation of input during scan configuration. An authenticated, remote attacker could potentially exploit this vulnerability to execute arbitrary code in a user's session. Tenable has implemented additional input validation mechanisms to correct this issue in Nessus 8.11.0.
References
Link | Resource |
---|---|
https://www.tenable.com/security/tns-2020-05 | Vendor Advisory |
Configurations
History
No history.
Information
Published : 2020-07-15 13:15
Updated : 2024-02-28 17:47
NVD link : CVE-2020-5765
Mitre link : CVE-2020-5765
CVE.ORG link : CVE-2020-5765
JSON object : View
Products Affected
tenable
- nessus
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')