CVE-2013-3598
SearchBlox < 7.5 - Unauthenticated Path Traversal and Arbitrary File Write via CreateTemplateServlet Name Parameter
Title source: llmDescription
Directory traversal vulnerability in servlet/CreateTemplateServlet in SearchBlox before 7.5 build 1 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the name parameter.
References (4)
Core 4
Core References
Various Sources x_refsource_misc
http://buddhalabs.com/Advisories/WebAdvisories.html
Various Sources x_refsource_confirm
http://www.searchblox.com/developers-2/change-log
US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/592942
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/96619
Scores
EPSS
0.0217
EPSS Percentile
80.1%
Details
CWE
CWE-22
Status
published
Products (9)
searchblox/searchblox
6.2 build_1
searchblox/searchblox
6.3 build_1
searchblox/searchblox
6.4 build_1 (2 CPE variants)
searchblox/searchblox
7.0
searchblox/searchblox
7.1
searchblox/searchblox
7.2
searchblox/searchblox
7.3
searchblox/searchblox
7.4
searchblox/searchblox
< 7.5
Published
Aug 28, 2013
Tracked Since
Feb 18, 2026