cve/2020/CVE-2020-10130.md

### [CVE-2020-10130](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10130)
![](https://img.shields.io/static/v1?label=Product&message=SearchBlox&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%209.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-639%20Authorization%20Bypass%20Through%20User-Controlled%20Key&color=brighgreen)

### Description

SearchBlox before Version 9.1 is vulnerable to business logic bypass where the user is able to create multiple super admin users in the system.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/InfoSec4Fun/CVE-2020-10130