CVE-2017-15220

Description

Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows remote attackers to execute arbitrary code.

References

https://github.com/vasilerevnic/CVE-2017-15220-vxsearch-rce

https://github.com/vasilerevnic/Published-CVEs

https://www.exploit-db.com/exploits/42973/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS