VDB
Sign up
HIGH

GHSA-q88g-qx42-xfrh

Path traversal in bolt/core

Quick fix

GHSA-q88g-qx42-xfrh — bolt/core: upgrade to the fixed version with the command below.

composer require bolt/core:^4.1.13

Details

Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/bolt/core
Introduced in: 0Fixed in: 4.1.13
Fixcomposer require bolt/core:^4.1.13

References