CVE-2020-10131

CVE-2020-10131

SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter.

Affected

SearchBlox

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.55% chance of exploitation in the next 30 days, 75th percentile

Published

2023-09-06

Updated

2024-09-26

Proof-of-concept exploits (1)

• InfoSec4Fun/CVE-2020-101310★ · 2023-08-11

Security advisories

• https://developer.searchblox.com/v9.2/changelog/version-921

References

• CVE Record
• NVD entry

Related

• CVE-2020-10128
• CVE-2020-10129
• CVE-2020-10130
• CVE-2020-10132
• CVE-2020-13158
• CVE-2020-13159