Skip to content
OpenAdvisories

Archive

5 April 2019

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 8.8
    CVE-2019-10874 Public exploit

    Bolt Cross Site Request Forgery (CSRF)

    Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file.