Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-10874
HistoryApr 05, 2019 - 5:29 a.m.

Cross site request forgery (csrf)

2019-04-0505:29:00
PRIOn knowledge base
www.prio-n.com
5

9.1 High

AI Score

Confidence

High

0.056 Low

EPSS

Percentile

93.3%

Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file.

CPENameOperatorVersion
bolteq3.6.6

9.1 High

AI Score

Confidence

High

0.056 Low

EPSS

Percentile

93.3%