CVE-2020-10131

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Sep 6, 2023
Updated: Nov 7, 2023
CWE ID 1236

Summary

CVE-2020-10131 is a vulnerability affecting SearchBlox versions prior to 9.2.1. Hackers can exploit this issue by injecting malicious CSV macros into the "Featured Results" parameter. Successful exploitation allows attackers to execute arbitrary code on the target system, leading to potential data theft or system compromise. Organizations using SearchBlox are advised to update to the latest version or apply patches to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share