GHSA-3g6c-88pf-m46f

Bolt Cross Site Request Forgery (CSRF)

Source: GitHub Advisory Database (reviewed) High CVE-2019-10874

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	bolt/bolt	>= 3.6.6, < 3.6.7	3.6.7

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Request Forgery (CSRF) in the `bolt/upload` File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the `file/edit/config/config.yml` configuration file.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2019-10874 advisory
https://github.com/bolt/bolt/pull/7768/commits/91187aef36363a870d60b0a3c1bf8507af34c9e4 web
https://fgsec.net/from-csrf-to-rce-bolt-cms web
https://github.com/bolt/bolt package
https://www.exploit-db.com/exploits/46664 web
http://packetstormsecurity.com/files/152429/Bolt-CMS-3.6.6-Cross-Site-Request-Forgery-Code-Execution.html web