Lucene search

K
osvGoogleOSV:CVE-2019-9185
HistoryMar 07, 2019 - 11:29 p.m.

CVE-2019-9185

2019-03-0723:29:02
Google
osv.dev
8

AI Score

7.8

Confidence

High

EPSS

0.006

Percentile

79.6%

Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension.

AI Score

7.8

Confidence

High

EPSS

0.006

Percentile

79.6%