Lucene search
GoogleOSV:GHSA-3G6C-88PF-M46FHistoryMay 13, 2022 - 1:12 a.m.
Bolt Cross Site Request Forgery (CSRF)
2022-05-1301:12:16
Google
osv.dev
2
Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file.
References
packetstormsecurity.com/files/152429/Bolt-CMS-3.6.6-Cross-Site-Request-Forgery-Code-Execution.html
fgsec.net/from-csrf-to-rce-bolt-cms
github.com/bolt/bolt
github.com/bolt/bolt/pull/7768/commits/91187aef36363a870d60b0a3c1bf8507af34c9e4
nvd.nist.gov/vuln/detail/CVE-2019-10874
www.exploit-db.com/exploits/46664
Related
packetstorm
packetstorm
Bolt CMS 3.6.6 Cross Site Request Forgery / Code Execution
2019-04-08 00:00:00
nvd
nvd
CVE-2019-10874
2019-04-05 05:29:03
github
github
Bolt Cross Site Request Forgery (CSRF)
2022-05-13 01:12:16
cve
cve
CVE-2019-10874
2019-04-05 05:29:03
osv
osv
CVE-2019-10874
2019-04-05 05:29:03
cvelist
cvelist
CVE-2019-10874
2019-04-05 04:42:32
veracode
veracode
Denial Of Service (DoS)
2019-04-05 19:08:18
prion
prion
Cross site request forgery (csrf)
2019-04-05 05:29:00
zdt
zdt
Bolt CMS 3.6.6 - Cross-Site Request Forgery / Remote Code Execution Exploit
2019-04-09 00:00:00