Описание
Bolt Unrestricted Upload of File with Dangerous Type
Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension.
Пакеты
Наименование
bolt/bolt
composer
Затронутые версииВерсия исправления
< 3.6.5
3.6.5
Связанные уязвимости
CVSS3: 8.8
nvd
почти 7 лет назад
Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension.
CVSS3: 8.8
msrc
4 месяца назад
Controller/Async/FilesystemManager.php in the filemanager in Bolt allows remote attacke