CVE-2020-10128

MEDIUM

SearchBlox product before V-9.2.1 is vulnerable to Stored-Cross Site Scripting

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2020-10128 has a selected CVSS score of 5.4 (medium); EIP currently links 1 repository PoC.

Description

SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products multiple parameters are not sanitized/validate properly which allows an attacker to inject malicious JavaScript.

Description source: CVE List

Exploitation context

Available material

Repository PoCs
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 30, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

SearchBlox

Browse SearchBlox / SearchBlox
CVE ListBefore 9.2.1affected

Proofs of concept

1

Repository PoCs

GitHubInfoSec4Fun/CVE-2020-10128Repository PoCby InfoSec4Fun0Not analyzed1 file

1.7 KiB

GitHub
PoC details

References

2