PT-2020-17847 · Bolt · Bolt Cms

Staz0T · CVE-2020-4040 · Published 2020-06-08 · Updated 2022-10-07

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bolt CMS versions prior to 3.7.1

Description The issue is related to the lack of proper CSRF protection in the preview generating endpoint. This endpoint is intended for use by authorized users such as admins, developers, chief-editors, and editors to generate previews of content. However, due to the lack of CSRF protection, unauthorized users could also generate previews.

Recommendations For versions prior to 3.7.1, update to version 3.7.1 to resolve the issue. As a temporary workaround, consider restricting access to the preview generating endpoint to minimize the risk of unauthorized preview generation.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2020-4040

GHSA-2Q66-6CC3-6XM8

Affected Products

Bolt Cms

References · 10

• 🔥 http://seclists.org/fulldisclosure/2020/Jul/4 · Exploit
• 🔥 http://packetstormsecurity.com/files/158299/Bolt-CMS-3.7.0-XSS-CSRF-Shell-Upload.html · Exploit
• https://github.com/bolt/bolt/commit/b42cbfcf3e3108c46a80581216ba03ef449e419f · Patch
• https://github.com/bolt/bolt/pull/7853 · Patch
• https://github.com/bolt/bolt/security/advisories/GHSA-2q66-6cc3-6xm8 · Patch
• https://osv.dev/vulnerability/CVE-2020-4040 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4040 · Security Note
• https://osv.dev/vulnerability/GHSA-2q66-6cc3-6xm8 · Vendor Advisory
• https://github.com/bolt/bolt · Note
• https://t.me/cvenotify/4243 · Telegram Post