PT-2022-20685 · Bolt · Bolt

Published 2022-08-01 · Updated 2022-08-08 · CVE-2022-31321

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Bolt version 5.1.7

Description The issue is related to incorrect input validation in the foldername parameter, which can be exploited by attackers to perform directory enumeration or cause a Denial of Service (DoS) via a crafted input.

Recommendations For Bolt version 5.1.7, consider restricting the use of the foldername parameter until a patch is available to prevent potential directory enumeration or Denial of Service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2022-31321

Affected Products

Bolt

References · 5

• 🔥 https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-31321 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31321 · Vendor Advisory
• https://t.me/cvenotify/34113 · Telegram Post
• http://bolt.com · Note