CVE-2015-0970
HighSummary
CVE-2015-0970 is a CSRF vulnerability in SearchBlox before version 8.2 that allows remote attackers to hijack the authentication of arbitrary users.
Risk Assessment
Attackers can exploit this vulnerability to take over user sessions, potentially leading to unauthorized access to application data and functions.
Recommendation
It is recommended to upgrade SearchBlox to version 8.2 or later to mitigate this vulnerability.
Other vulnerabilities in SearchBlox
See all- CVE-2015-0968High
In SearchBlox before version 8.2, there is an unrestricted file upload vulnerability in admin/uploadImage.html that allows remote attackers to execute arbitrary code by uploading a file with an executable extension and the image/jpeg content type.
- CVE-2015-7919Critical
SearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, potentially leading to application crashes.
Original NVD description (English source)
Cross-site request forgery (CSRF) vulnerability in SearchBlox before 8.2 allows remote attackers to hijack the authentication of arbitrary users.