CVE-2015-0970 - Cross-site request forgery (CSRF) vulnerability in SearchBlox before 8.2 allows remote attackers to hijack the authentication of arbitrary users

HIGH

Cross-site request forgery (CSRF) vulnerability in SearchBlox before 8.2 allows remote attackers to hijack the authentication of arbitrary users

Published Apr 18, 2015

8.8

HIGH

CVSS 3.1

EPSS 1.04%

Cross-site request forgery (CSRF) vulnerability in SearchBlox before 8.2 allows remote attackers to hijack the authentication of arbitrary users.

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

http://www.kb.cert.org/vuls/id/697316
third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.kb.cert.org/vuls/id/697316		third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource

No recorded changes yet.

Sources

Status PUBLISHED

Assigner certcc

Published Apr 18, 2015

Updated Aug 6, 2024

Reserved Jan 10, 2015

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a