Lucene search

MitreCVE-2022-31321

HistoryAug 01, 2022 - 8:15 p.m.

CVE-2022-31321

2022-08-0120:15:08

CWE-20

mitre

web.nvd.nist.gov

146

cve

2022

31321

input validation

bolt

directory enumeration

dos

nvd

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

Confidence

High

EPSS

0.002

Percentile

60.0%

JSON

The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service (DoS) via a crafted input.

Affected configurations

Nvd

Node

boltcmsboltRange≤5.7

VendorProductVersionCPE
boltcmsbolt*cpe:2.3:a:boltcms:bolt:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
boltcms	bolt	*	cpe:2.3:a:boltcms:bolt::::::::

References

bolt.com

github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md

Social References

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

Confidence

High

EPSS

0.002

Percentile

60.0%

JSON

Related for CVE-2022-31321