Lucene search

K
osvGoogleOSV:GHSA-WR23-M9M2-JJF4
HistoryMay 13, 2022 - 1:12 a.m.

Bolt Improper Access Control

2022-05-1301:12:16
Google
osv.dev
2

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.3%

Bolt before 3.3.6 does not properly restrict access to _profiler routes, related to EventListener/ProfilerListener.php and Provider/EventListenerServiceProvider.php.

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.3%