← back
CVE-2017-15220

CVE-2017-15220

EPSS 7.1%
Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows remote attackers to execute arbitrary code.
Affected products
n/a · n/a
public PoCs found — 3
githubgithub.com/vasilerevnic/CVE-2017-15220-vxsearch-rce★ 0cve_referencewww.exploit-db.com/exploits/42973/unverifiedexploitdbwww.exploit-db.com/exploits/42973unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.exploit-db.com/exploits/42973/