CVE-2019-10874: Bolt CMS Cross Site Request Forgery (CSRF)
Summary
CVE-2019-10874: Bolt Cross Site Request Forgery (CSRF). Affects bolt/bolt versions >= 3.6.6, < 3.6.7. Fixed in 3.6.7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Bolt CMS is an open-source content management system that allows users to create and manage websites. It provides various features, including a file upload functionality. However, a vulnerability in the Bolt CMS 3.6.6 version allows remote attackers to execute arbitrary code through a Cross Site Request Forgery (CSRF) attack. By uploading a JavaScript file and including executable extensions in the configuration file, attackers can exploit this vulnerability.
Vulnerability Detail
The vulnerability, known as CVE-2019-10874, arises from a lack of proper CSRF protection in the bolt/upload File Upload feature. This allows attackers to trick authenticated users into performing unintended actions, such as uploading malicious files. By uploading a JavaScript file and modifying the file/edit/config/config.yml configuration file, attackers can execute arbitrary code on the target system. This can lead to various consequences, including unauthorized access, data manipulation, and potential system compromise.
How To Fix
Minimum fixed version
3.6.7
This is the first release that contains the fix.
composer require bolt/bolt:3.6.7Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable the file upload functionality in Bolt CMS until the vulnerability is patched. This can be done by modifying the configuration settings or removing the file upload feature from the user interface. However, it is strongly recommended to apply the official fix by upgrading to the latest version to ensure comprehensive security.
Conclusion
In conclusion, the vulnerability in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code through a Cross Site Request Forgery (CSRF) attack. Users of Bolt CMS should upgrade to version 3.6.7 or later to fix this vulnerability. Alternatively, they can temporarily disable the file upload functionality until the official fix is applied. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for bolt/bolt →
FAQ
Bolt CMS is an open-source content management system that allows users to create and manage websites. It provides a range of features and functionalities for website development and content administration.
Cross Site Request Forgery (CSRF) is a type of security vulnerability where an attacker tricks a user into performing unintended actions on a web application. In the context of this vulnerability, it allows attackers to upload malicious files and execute arbitrary code on the target system.
The vulnerability in Bolt CMS allows remote attackers to execute arbitrary code on the target system by exploiting the Cross Site Request Forgery (CSRF) vulnerability in the file upload feature. This can lead to unauthorized access, data manipulation, and potential system compromise.
To fix the vulnerability, users should upgrade their Bolt CMS installation to version 3.6.7 or later. This updated version includes the necessary patches and improvements to mitigate the CSRF vulnerability. Detailed instructions for upgrading can be found on the official Bolt CMS website.
As a temporary workaround, users can disable the file upload functionality in Bolt CMS until the vulnerability is patched. This can be done by modifying the configuration settings or removing the file upload feature from the user interface. However, it is strongly recommended to apply the official fix by upgrading to the latest version.
References
Related vulnerabilities
Recent vulnerabilities recorded for bolt/bolt.
