Bolt Cross Site Request Forgery (CSRF)

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2019-10874 · ADVISORY
• bolt/bolt#7768 · WEB
• fgsec.net/from-csrf-to-rce-bolt-cms · WEB
• bolt/bolt · PACKAGE
• exploit-db.com/exploits/46664 · WEB
• packetstormsecurity.com/files/152429/Bolt-CMS-3.6.6-Cross-Site-Request-Forgery-Code-Execution.html · WEB
• fgsec.net/from-csrf-to-rce-bolt-cms · Exploit
• exploit-db.com/exploits/46664 · Exploit

bolt/bolt のその他の脆弱性

• CVE-2025-34086高 8.8Bolt CMS versions 3.7.0 and earlier contain a chain of vulnerabilities that together allow an authenticated user to achieve remote code exec…
• CVE-2024-7300中 5.4A vulnerability classified as problematic has been found in Bolt CMS 3.7.1. Affected is an unknown function of the file /bolt/editcontent/sh…
• CVE-2020-28925中 5.3Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the "How to Harden Y…
• CVE-2020-4041中 6.1In Bolt CMS before version 3.7.1, the filename of uploaded files was vulnerable to stored XSS. It is not possible to inject javascript code …
• CVE-2020-4040中 4.3Bolt CMS before version 3.7.1 lacked CSRF protection in the preview generating endpoint. Previews are intended to be generated by the admins…