GHSA-gmg5-f2gm-p3h7

ghsaUSosv

Bolt Unrestricted Upload of File with Dangerous Type

view advisory published 2022-05-13Licence: CC-BY-4.0

`Controller/Async/FilesystemManager.php` in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a `.php` extension.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-9185US	high8.8	2.66% (86th)	—	2019-03-07
Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have…

references

External citations — patches, advisories, analysis.

https://github.com/bolt/boltPACKAGE
https://github.com/bolt/bolt/blob/v3.6.5/changelog.mdWEB
https://github.com/bolt/bolt/pull/7745WEB
https://github.com/bolt/bolt/releases/tag/v3.6.5WEB
https://nvd.nist.gov/vuln/detail/CVE-2019-9185ADVISORY
https://www.hacksecproject.com/?p=293WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan