CVE-2017-15220

Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows remote attackers to execute arbitrary code.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-10-11

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Vx Search (Flexense)

References

• https://www.exploit-db.com/exploits/42973/