Lucene search

K
osvGoogleOSV:GHSA-GMG5-F2GM-P3H7
HistoryMay 13, 2022 - 1:12 a.m.

Bolt Unrestricted Upload of File with Dangerous Type

2022-05-1301:12:17
Google
osv.dev
4

7.8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.4%

Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension.

7.8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.4%