CVE-2020-35580

HIGHNuclei

searchblox searchblox Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2020-35580 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.

Description

A local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url= request. Additionally, this may be used to read the contents of the SearchBlox configuration file (e.g., searchblox/WEB-INF/config.xml), which contains both the Super Admin's API key and the base64 encoded SHA1 password hashes of other SearchBlox users.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Nov 13, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

searchblox

Browse searchblox / searchblox
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryHIGHSearchBlox <9.2.2 - Local File InclusionCVSS 7.5

SearchBlox prior to version 9.2.2 is susceptible to local file inclusion in FileServlet that allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url= request. Additionally, this may be used to read the contents of the SearchBlox configuration file (e.g., searchblox/WEB-INF/config.xml), which contains both the Super Admin API key and the base64 encoded SHA1 password hashes of other SearchBlox users.

Impact

An attacker can exploit this vulnerability to access sensitive information, such as configuration files, credentials, or other sensitive data stored on the server.

Remediation

Upgrade to SearchBlox version 9.2.2 or later to mitigate the vulnerability.

WeaknessesCWE-22
Authorsdaffainfo
Template tagscve2020cvelfisearchbloxvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:searchblox:searchblox:*:*:*:*:*:*:*:*
https://hateshape.github.io/general/2021/05/11/CVE-2020-35580.html https://developer.searchblox.com/docs/getting-started-with-searchblox https://nvd.nist.gov/vuln/detail/CVE-2020-35580 https://github.com/ARPSyndicate/cvemon https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

3