Lucene search
GitHub Advisory DatabaseGHSA-W8CJ-MVF9-MPC9HistoryMay 06, 2021 - 6:53 p.m.
OS Command injection in Bolt
2021-05-0618:53:29
CWE-78
GitHub Advisory Database
github.com
42
0.001 Low
EPSS
Percentile
30.6%
Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the “How to Harden Your PHP for Better Security” guidance.
Related
cve
cve
CVE-2020-28925
2020-12-30 19:15:00
veracode
veracode
Authorization Bypass
2020-12-31 01:40:04
osv
osv
OS Command injection in Bolt
2021-05-06 18:53:29
CVE-2020-28925
2020-12-30 19:15:13
cvelist
cvelist
CVE-2020-28925
2020-12-30 18:47:18
prion
prion
Design/Logic Flaw
2020-12-30 19:15:00
cbl_mariner
cbl_mariner
CVE-2020-28925 affecting package bolt 0.9.2-2
2024-06-02 15:22:43
rosalinux
rosalinux
Advisory ROSA-SA-2021-1809
2021-07-02 16:34:28