« Volver al listado

CVE-2013-3598

Estado: ModificadaMedia (5)—

Directory traversal vulnerability in servlet/CreateTemplateServlet en SearchBlox before 7.5 build 1 permite a atacantes remotos sobreescribir archivos arbitrarios a través de .. (punto punto) en el parámetro name.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Searchblox — Searchblox

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-3598",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-08-28T13:09:15.853",
  "references": [
    {
      "url": "http://buddhalabs.com/Advisories/WebAdvisories.html",
      "source": "cret@cert.org"
    },
    {
      "url": "http://osvdb.org/96619",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/592942",
      "tags": [
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.searchblox.com/developers-2/change-log",
      "source": "cret@cert.org"
    },
    {
      "url": "http://buddhalabs.com/Advisories/WebAdvisories.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/96619",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/592942",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.searchblox.com/developers-2/change-log",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in servlet/CreateTemplateServlet in SearchBlox before 7.5 build 1 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the name parameter."
    },
    {
      "lang": "es",
      "value": "Directory traversal vulnerability in servlet/CreateTemplateServlet en SearchBlox before 7.5 build 1 permite a atacantes remotos sobreescribir archivos arbitrarios a través de .. (punto punto) en el parámetro name."
    }
  ],
  "lastModified": "2026-06-16T23:55:29.313",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:searchblox:searchblox:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9DB33F2D-97DC-49F0-8FDC-CECDDC75D615",
              "versionEndIncluding": "7.5"
            },
            {
              "criteria": "cpe:2.3:a:searchblox:searchblox:6.2:build_1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B15DEE8A-A32C-474F-B0D6-5DDFD962419A"
            },
            {
              "criteria": "cpe:2.3:a:searchblox:searchblox:6.3:build_1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3E78772-7D6D-4824-BC0F-1B1168781DF9"
            },
            {
              "criteria": "cpe:2.3:a:searchblox:searchblox:6.4:build_1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C79862E7-D02A-4CAE-854C-FA16244111F0"
            },
            {
              "criteria": "cpe:2.3:a:searchblox:searchblox:6.4:build_2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FEC596B5-859F-44DE-8068-C7D8111577C8"
            },
            {
              "criteria": "cpe:2.3:a:searchblox:searchblox:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E7ADDFFC-6373-448A-AC2A-D48821A46C3E"
            },
            {
              "criteria": "cpe:2.3:a:searchblox:searchblox:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9A603908-F326-4F63-8BD6-4D8A140EFC60"
            },
            {
              "criteria": "cpe:2.3:a:searchblox:searchblox:7.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E20F4C1A-892B-4B5E-B984-CDE59D025889"
            },
            {
              "criteria": "cpe:2.3:a:searchblox:searchblox:7.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8DCC2126-6DA4-4838-B049-781215A2EC04"
            },
            {
              "criteria": "cpe:2.3:a:searchblox:searchblox:7.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6CD5C63-10CA-4A93-8E28-BDAA70C03378"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}