Via WebProNews, Metasploit
explains
how it discovered flaws in the Google Mini enterprise search appliance that
could be abused to do "cross-site scripting, file discovery, service enumeration
and arbitrary command execution." The flaw was reported to Google apparently
privately earlier this year in June, a patch issued August and news of the issue
released yesterday. Metasploit praised Google for responding immediately and
being helpful through the fix and testing process.
Google Mini Security Issue Patched
Want SEW higher in your Google results?Add as a preferred source
More in Industry
View moreThe Search Engine Watch Top 5!
Gripping reads from 2022 that informed, amazed, and helped SEOs and search marketers tackle Google’s googlies and global dynamics
The ultimate 2022 Google updates round up
Summarizing the rumored and confirmed updates Google launched this year, their impact on page rankings and SEO strategy
Is Google headed towards a continuous “real-time” algorithm?
What a future-focused search landscape would look like and who could benefit