EUVD-2021-0567

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Bolt versions before 4.1.13 allow Directory Traversal in FileEditController and FilemanagerController

Reporter	Title	Published	Views	Family All 14
CBLMariner	CVE-2021-27367 affecting package bolt 0.9.2-2	12 Jan 202509:15	–	cbl_mariner
Circl	CVE-2021-27367	18 Feb 202100:49	–	circl
CNNVD	Bolt CMS 路径遍历漏洞	17 Feb 202100:00	–	cnnvd
CNVD	Bolt Directory Traversal Vulnerability	18 Feb 202100:00	–	cnvd
CVE	CVE-2021-27367	17 Feb 202120:47	–	cve
Cvelist	CVE-2021-27367	17 Feb 202120:47	–	cvelist
Github Security Blog	Path traversal in bolt/core	18 Feb 202120:51	–	github
Microsoft CVE	Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.	2 Oct 202506:11	–	mscve
NVD	CVE-2021-27367	17 Feb 202121:15	–	nvd
OSV	GHSA-Q88G-QX42-XFRH Path traversal in bolt/core	18 Feb 202120:51	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "1c04c853-f333-31ad-b201-33c659e0cde0",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "faa84f2e-1502-322d-9967-77997389b15d",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-27367
github	www.github.com/bolt/core/pull/2371
github	www.github.com/bolt/core/releases/tag/4.1.13
packagist	www.packagist.org/packages/bolt/core
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.5

CVSS 25

EPSS0.00274

bolt vulnerability directory traversal fileeditcontroller filemanagercontroller