CVE-2015-7309

The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitrary code…

published September 22, 2015

CVSS
—
EPSS
39%
Percentile
98.6
In the wild
Unconfirmed
What it is

The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitrary code by renaming a crafted file and then directly accessing it.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.38611 · 98.6th percentile
Published
2015-09-22T15:00Z
EPSS history
Timeline
  • 22 SEP 15:00Z
    The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitrary code…
    cvelistv5