Lucene search
MitreCVELIST:CVE-2019-10874HistoryApr 05, 2019 - 4:42 a.m.
CVE-2019-10874
2019-04-0504:42:32
mitre
www.cve.org
0.056 Low
EPSS
Percentile
93.3%
Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file.
Related
packetstorm
packetstorm
Bolt CMS 3.6.6 Cross Site Request Forgery / Code Execution
2019-04-08 00:00:00
nvd
nvd
CVE-2019-10874
2019-04-05 05:29:03
github
github
Bolt Cross Site Request Forgery (CSRF)
2022-05-13 01:12:16
cve
cve
CVE-2019-10874
2019-04-05 05:29:03
osv
osv
CVE-2019-10874
2019-04-05 05:29:03
Bolt Cross Site Request Forgery (CSRF)
2022-05-13 01:12:16
veracode
veracode
Denial Of Service (DoS)
2019-04-05 19:08:18
prion
prion
Cross site request forgery (csrf)
2019-04-05 05:29:00
zdt
zdt
Bolt CMS 3.6.6 - Cross-Site Request Forgery / Remote Code Execution Exploit
2019-04-09 00:00:00