CVE-2015-0968
HighSummary
In SearchBlox before version 8.2, there is an unrestricted file upload vulnerability in admin/uploadImage.html that allows remote attackers to execute arbitrary code by uploading a file with an executable extension and the image/jpeg content type.
Risk Assessment
This vulnerability poses a serious risk to organizations, allowing attackers to remotely execute code, potentially leading to system compromise.
Recommendation
It is recommended to upgrade to SearchBlox version 8.2 or later and implement strict controls on file uploads to prevent such attacks.
Other vulnerabilities in SearchBlox
See all- CVE-2015-0970High
CVE-2015-0970 is a CSRF vulnerability in SearchBlox before version 8.2 that allows remote attackers to hijack the authentication of arbitrary users.
- CVE-2015-7919Critical
SearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, potentially leading to application crashes.
Original NVD description (English source)
Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 8.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension and the image/jpeg content type, a different vulnerability than CVE-2013-3590.