Path traversal in bolt/core

높음 7.5CVE-2021-27367 · GHSA-q88g-qx42-xfrh · Published 17/02/2021 · updated 17/06/2026

요약

Package	Affected versions	Patched versions
bolt/core Packagist	`< 4.1.13`	`4.1.13`
bolt boltcms	`< 4.1.13`	`4.1.13`

Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.

NVD description

Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.