PT-2018-10685 · Searchblox · Searchblox

Ahmet Gurel + 1 · Published 2018-06-05 · Updated 2018-07-31 · CVE-2018-11586

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SearchBlox version 8.6.7

Description A XML external entity (XXE) issue in the api/rest/status endpoint allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks by sending a crafted DTD in an XML request.

Recommendations For SearchBlox version 8.6.7, as a temporary workaround, consider disabling the api/rest/status endpoint until a patch is available. Restrict access to this endpoint to minimize the risk of exploitation. Avoid using crafted DTDs in XML requests to the affected endpoint until the issue is resolved.

Exploit

Fix

XXE

SSRF

Weakness Enumeration

CWE-611

CWE-918

Related Identifiers

CVE-2018-11586

Affected Products

Searchblox

References · 5

• 🔥 http://packetstormsecurity.com/files/148032/SearchBlox-8.6.7-XML-External-Entity-Injection.html · Exploit
• 🔥 https://exploit-db.com/exploits/44827 · Exploit
• 🔥 https://gurelahmet.com/searchblox-8-6-7-out-of-band-xml-external-entity-oob-xxe-cve-2018-11586 · Exploit
• https://osv.dev/vulnerability/CVE-2018-11586 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-11586 · Security Note