PT-2019-19422 · Bolt · Bolt

Medu554 · Publicado 2019-03-07 · Atualizado 2022-05-13 · CVE-2019-9185

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bolt versions prior to 3.6.5

Description The issue allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension. This is possible due to a flaw in the Controller/Async/FilesystemManager.php file in the filemanager.

Recommendations For versions prior to 3.6.5, update to version 3.6.5 or later to resolve the issue. As a temporary workaround, consider restricting file upload and rename capabilities to minimize the risk of exploitation. Avoid allowing users to upload files with .php extensions until the issue is resolved.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2019-9185

GHSA-GMG5-F2GM-P3H7

Produtos afetados

Bolt

Referências · 8

• 🔥 https://hacksecproject.com/?p=293 · Exploit
• https://github.com/bolt/bolt/releases/tag/v3.6.5 · Correção
• https://github.com/bolt/bolt/blob/v3.6.5/changelog.md · Nota
• https://github.com/bolt/bolt/pull/7745 · Nota
• https://github.com/bolt/bolt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-9185 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-9185 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-gmg5-f2gm-p3h7 · Aviso do Fabricante