CVE-2020-10131
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Sep 6, 2023
Updated: Nov 7, 2023
CWE ID 1236
Summary
CVE-2020-10131 is a vulnerability affecting SearchBlox versions prior to 9.2.1. Hackers can exploit this issue by injecting malicious CSV macros into the "Featured Results" parameter. Successful exploitation allows attackers to execute arbitrary code on the target system, leading to potential data theft or system compromise. Organizations using SearchBlox are advised to update to the latest version or apply patches to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- SearchBlox