Lucene search
GoogleOSV:GHSA-W8CJ-MVF9-MPC9HistoryMay 06, 2021 - 6:53 p.m.
OS Command injection in Bolt
2021-05-0618:53:29
Google
osv.dev
3
bolt
command injection
twig
security guidance
php
EPSS
0.001
Percentile
30.9%
Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the “How to Harden Your PHP for Better Security” guidance.
Related
veracode
veracode
Authorization Bypass
2020-12-31 01:40:04
cve
cve
CVE-2020-28925
2020-12-30 19:15:13
osv
osv
CVE-2020-28925
2020-12-30 19:15:13
cbl_mariner
cbl_mariner
CVE-2020-28925 affecting package bolt 0.9.2-2
2024-09-21 03:20:41
cvelist
cvelist
CVE-2020-28925
2020-12-30 18:47:18
prion
prion
Design/Logic Flaw
2020-12-30 19:15:00
github
github
OS Command injection in Bolt
2021-05-06 18:53:29
nvd
nvd
CVE-2020-28925
2020-12-30 19:15:13
rosalinux
rosalinux
Advisory ROSA-SA-2021-1809
2021-07-02 16:34:28