Description

A security vulnerability exists in SearchBlox that allows an attacker to read arbitrary local files from the affected server.

Remediation

Upgrade to the latest version of SearchBlox

References

CVE-2020-35580

Related Vulnerabilities

WordPress Plugin SAM Pro (Free Edition) Local File Inclusion (1.9.6.67)

WordPress Plugin Simple Fields Local File Inclusion (0.3.5)

WordPress Plugin wp-publications Local File Inclusion (0.0)

WordPress Plugin NextGEN Gallery-WordPress Gallery Local File Inclusion (2.1.56)

WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Directory Traversal (1.7.14.2)

Severity

High

Classification

CVE-2020-35580 CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

File Inclusion