Lucene search
K

Bolt before 3.3.6 does not properly restrict access to _profiler routes

🗓️ 02 Oct 2025 06:10:55Reported by MicrosoftType 
mscve
 mscve
🔗 msrc.microsoft.com👁 2 Views

Bolt versions prior to 3.3.6 do not restrict access to _profiler routes.

Related
Detection
ReporterTitlePublishedViews
Family
CBLMariner
CVE-2017-16754 affecting package bolt 0.9.2-2
12 Jan 202509:15
cbl_mariner
CNVD
Bolt _profiler access bypass vulnerability
10 Nov 201700:00
cnvd
CVE
CVE-2017-16754
9 Nov 201719:00
cve
Cvelist
CVE-2017-16754
9 Nov 201719:00
cvelist
EUVD
EUVD-2022-5624
3 Oct 202520:07
euvd
Github Security Blog
Bolt Improper Access Control
13 May 202201:12
github
NVD
CVE-2017-16754
10 Nov 201702:29
nvd
OSV
GHSA-WR23-M9M2-JJF4 Bolt Improper Access Control
13 May 202201:12
osv
Prion
Code injection
10 Nov 201702:29
prion
Rosalinux
Advisory ROSA-SA-2021-1809
2 Jul 202116:34
rosalinux
Rows per page
Vulners

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

02 Oct 2025 06:10Current
7High risk
Vulners AI Score7
CVSS 25
CVSS 35.3
CVSS 3.15.3
EPSS0.0038
2