Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2024-3232

Formula Injection Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
tenable

Description

A formula injection vulnerability exists in Tenable Identity Exposure where an authenticated remote attacker with administrative privileges could manipulate application form fields in order to trick another administrator into executing CSV payloads. - CVE-2024-3232

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenable Tenable Identity Exposure

Default version status: affected

  • Tenable Identity Exposure 3.42affected
  • Tenable Identity Exposure 3.29affected
  • Tenable Identity Exposure 3.19affected

References