{"id":"CVE-2019-10874","published":"2019-04-05T04:42:32Z","modified":"2024-08-04T22:32:02Z","title":"Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to…","vendor":null,"product":null,"tier":"tail","description":{"text":"Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.04522,"percentile":0.91538,"provenance":"source"},"cwes":[],"references":[{"url":"https://fgsec.net/from-csrf-to-rce-bolt-cms/","tags":["x_refsource_MISC"]},{"url":"https://github.com/bolt/bolt/pull/7768/commits/91187aef36363a870d60b0a3c1bf8507af34c9e4","tags":["x_refsource_MISC"]},{"url":"https://www.exploit-db.com/exploits/46664/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://packetstormsecurity.com/files/152429/Bolt-CMS-3.6.6-Cross-Site-Request-Forgery-Code-Execution.html","tags":["x_refsource_MISC"]}],"priority":{"score":23.3,"factors":[{"name":"EPSS percentile","points":18.31},{"name":"Public exploit code","points":5.0}]},"exploitSources":{"exploitdb":{"count":1,"earliest":"2019-04-08"},"first":{"date":"2019-04-08","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/46664"},"provenance":"source"},"affected":[{"ecosystem":"Packagist","package":"bolt/bolt","vulnerableRanges":[">=3.6.6, <3.6.7"],"patched":["3.6.7"],"from":["GHSA-3g6c-88pf-m46f"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2176","exploited":false,"provenance":"source"},"exploits":[{"id":46664,"url":"https://www.exploit-db.com/exploits/46664","title":"Bolt CMS 3.6.6 - Cross-Site Request Forgery / Remote Code Execution","date":"2019-04-08","verified":false,"provenance":"source"}],"exploitRefs":["https://www.exploit-db.com/exploits/46664/","http://packetstormsecurity.com/files/152429/Bolt-CMS-3.6.6-Cross-Site-Request-Forgery-Code-Execution.html","https://www.exploit-db.com/exploits/46664"],"lineage":{"packageHistory":[{"cve":"CVE-2017-16754","published":"2017-11-09","fixed":"3.3.6","kev":false},{"cve":"CVE-2018-19933","published":"2018-12-17","fixed":"3.6.2","kev":false},{"cve":"CVE-2019-9185","published":"2019-03-07","fixed":"3.6.5","kev":false},{"cve":"CVE-2019-10874","published":"2019-04-05","fixed":"3.6.7","kev":false},{"cve":"CVE-2019-15483","published":"2019-08-23","fixed":"3.6.10","kev":false,"link":{"from":"CVE-2019-10874","to":"CVE-2019-15483","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:bolt/bolt","fromFixed":"3.6.7","toFixed":"3.6.10","daysApart":140}]}},{"cve":"CVE-2019-15484","published":"2019-08-23","fixed":"3.6.10","kev":false,"link":{"from":"CVE-2019-10874","to":"CVE-2019-15484","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:bolt/bolt","fromFixed":"3.6.7","toFixed":"3.6.10","daysApart":140}]}},{"cve":"CVE-2019-15485","published":"2019-08-23","fixed":"3.6.10","kev":false,"link":{"from":"CVE-2019-10874","to":"CVE-2019-15485","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:bolt/bolt","fromFixed":"3.6.7","toFixed":"3.6.10","daysApart":140}]}}],"package":"Packagist:bolt/bolt"}}