Lucene search

K
osvGoogleOSV:CVE-2019-10874
HistoryApr 05, 2019 - 5:29 a.m.

CVE-2019-10874

2019-04-0505:29:03
Google
osv.dev
3

8 High

AI Score

Confidence

High

0.056 Low

EPSS

Percentile

93.3%

Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file.

Rows per page:
1-10 of 1081

8 High

AI Score

Confidence

High

0.056 Low

EPSS

Percentile

93.3%