QwikSec

Security Database

CVE

CWE

Training

CVE-2020-4040

Published: Jun 8, 2020

Modified: Aug 4, 2024

PUBLISHED

CVSS v3.1

8.6

HIGH

Description

Bolt CMS before version 3.7.1 lacked CSRF protection in the preview generating endpoint. Previews are intended to be generated by the admins, developers, chief-editors, and editors, who are authorized to create content in the application. But due to lack of proper CSRF protection, unauthorized users could generate a preview. This has been fixed in Bolt 3.7.1

Vendor	Product	Versions
bolt	bolt	affected `< 3.7.1`

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

References

https://github.com/bolt/bolt/security/advisories/GHSA-2q66-6cc3-6xm8

x_refsource_CONFIRM

https://github.com/bolt/bolt/pull/7853

x_refsource_MISC

https://github.com/bolt/bolt/commit/b42cbfcf3e3108c46a80581216ba03ef449e419f

x_refsource_MISC

http://packetstormsecurity.com/files/158299/Bolt-CMS-3.7.0-XSS-CSRF-Shell-Upload.html

x_refsource_MISC

20200703 Bolt CMS <= 3.7.0 Multiple Vulnerabilities - CSRF to RCE

mailing-list

x_refsource_FULLDISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.