SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter.
References
Link | Resource |
---|---|
https://developer.searchblox.com/v9.2/changelog/version-921 | Release Notes |
Configurations
History
07 Nov 2023, 03:14
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-09-06 19:15
Updated : 2023-11-07 03:14
NVD link : CVE-2020-10131
Mitre link : CVE-2020-10131
JSON object : View
Products Affected
searchblox
- searchblox
CWE
CWE-1236
Improper Neutralization of Formula Elements in a CSV File