CVE-2021-27367

Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2021-02-17

Last modified

2024-08-03

Weaknesses

CWE-22

Affected products

• Bolt (Boltcms)

References

• https://github.com/bolt/core/pull/2371
• https://github.com/bolt/core/releases/tag/4.1.13