CVE-2020-35580 - A local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url= request

Back Back to CVE browser

HIGH

A local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url= request

Published May 20, 2021

7.5

HIGH

CVSS 3.1

EPSS 13.98%

Description

A local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url= request. Additionally, this may be used to read the contents of the SearchBlox configuration file (e.g., searchblox/WEB-INF/config.xml), which contains both the Super Admin's API key and the base64 encoded SHA1 password hashes of other SearchBlox users.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (3)

https://developer.searchblox.com/docs/getting-started-with-searchblox
x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23246
Advisory
https://hateshape.github.io/general/2021/05/11/CVE-2020-35580.html
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://developer.searchblox.com/docs/getting-started-with-searchblox		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23246		Advisory
https://hateshape.github.io/general/2021/05/11/CVE-2020-35580.html		x_refsource_MISCExploitThird Party Advisory