high7.5
CVE-2021-27367
Path traversal in bolt/core
Impact
Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | bolt/core | < 4.1.13 | 4.1.13 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Boltcms | Bolt | before 4.1.13 |