Lucene search

[email protected]CVE-2020-10132

HistorySep 06, 2023 - 7:15 p.m.

CVE-2020-10132

2023-09-0619:15:43

CWE-79

[email protected]

web.nvd.nist.gov

searchblox

version 9.1

vulnerability

cve-2020-10132

cross-origin resource sharing

misconfiguration

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration.

Affected configurations

NVD

Node

searchbloxsearchbloxRange<9.1

CPENameOperatorVersion
searchblox:searchbloxsearchbloxlt9.1

CPE	Name	Operator	Version
searchblox:searchblox	searchblox	lt	9.1

CNA Affected

[
  {
    "vendor": "SearchBlox",
    "product": "SearchBlox",
    "versions": [
      {
        "status": "affected",
        "version": "9.1"
      }
    ]
  }
]

References

developer.searchblox.com/v9.2/changelog/version-91

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

Related for CVE-2020-10132

cvelist1 prion1 nvd1