CVE-2019-10874

Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a…

published April 5, 2019

CVSS
—
EPSS
5%
Percentile
91.5
In the wild
Unconfirmed
What it is

Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04522 · 91.5th percentile
Published
2019-04-05T04:42Z
EPSS history
Timeline
  • 05 APR 04:42Z
    Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a…
    cvelistv5