CVE-2019-9185

Опубликовано: 07 мар. 2019

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension.

Ссылки

https://github.com/bolt/bolt/blob/v3.6.5/changelog.md
Third Party Advisory
https://github.com/bolt/bolt/pull/7745
Third Party Advisory
https://github.com/bolt/bolt/releases/tag/v3.6.5
Patch
Release Notes
Third Party Advisory
https://www.hacksecproject.com/?p=293
Exploit
Third Party Advisory
https://github.com/bolt/bolt/blob/v3.6.5/changelog.md
Third Party Advisory
https://github.com/bolt/bolt/pull/7745
Third Party Advisory
https://github.com/bolt/bolt/releases/tag/v3.6.5
Patch
Release Notes
Third Party Advisory
https://www.hacksecproject.com/?p=293
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:boltcms:bolt:*:*:*:*:*:*:*:*

Версия до 3.6.5 (исключая)

EPSS

Процентиль: 77%

0.01076

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

CVE-2019-9185

CVSS3: 8.8

msrc

4 месяца назад

Controller/Async/FilesystemManager.php in the filemanager in Bolt allows remote attacke

GHSA-gmg5-f2gm-p3h7

CVSS3: 8.8

github

больше 3 лет назад

Bolt Unrestricted Upload of File with Dangerous Type

EPSS

Процентиль: 77%

0.01076

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434