GitHub Advisoryadvisory · Packagist

GHSA-q88g-qx42-xfrh Path traversal in bolt/core

HIGH Published 2021-02-18 Modified 2021-02-24 Official page ↗
Aliases
CVE-2021-27367
Ecosystem
Packagist
Packages
bolt/core
Severity
High
Weaknesses
CWE-22
Reviewed
2021-02-18

Affected packages

• Packagist bolt/core: < 4.1.13 → fixed in 4.1.13

Description

Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.

Related

Alias · CVE (1)

  • CVE-2021-27367 Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References