CVE-2013-3598

Description

Directory traversal vulnerability in servlet/CreateTemplateServlet in SearchBlox before 7.5 build 1 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the name parameter.

References

http://www.searchblox.com/developers-2/change-log

http://www.kb.cert.org/vuls/id/592942

http://osvdb.org/96619

http://buddhalabs.com/Advisories/WebAdvisories.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS