CVE-2019-9185

Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously…

published March 7, 2019

CVSS
—
EPSS
3%
Percentile
85.6
In the wild
Unconfirmed
What it is

Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02661 · 85.6th percentile
Published
2019-03-07T22:00Z
EPSS history
Timeline
  • 07 MAR 22:00Z
    Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously…
    cvelistv5