Vulnerabilities > CVE-2020-4040 - Unspecified vulnerability in Boltcms Bolt

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

boltcms

NVD

Published: 2020-06-08

Updated: 2024-11-21

Summary

Bolt CMS before version 3.7.1 lacked CSRF protection in the preview generating endpoint. Previews are intended to be generated by the admins, developers, chief-editors, and editors, who are authorized to create content in the application. But due to lack of proper CSRF protection, unauthorized users could generate a preview. This has been fixed in Bolt 3.7.1

Vulnerable Configurations

Part	Description	Count
Application	Boltcms Boltcms Bolt - Boltcms Bolt 0.8.4 Boltcms Bolt 0.8.5 Boltcms Bolt 0.9.5 Boltcms Bolt 0.9.10 Boltcms Bolt 1.0.0 Boltcms Bolt 1.0.5 Boltcms Bolt 1.1.2 Boltcms Bolt 1.1.4 Boltcms Bolt 1.2.1 Boltcms Bolt 1.3.0 Boltcms Bolt 1.4.0 Boltcms Bolt 1.4.3 Boltcms Bolt 1.5.1 Boltcms Bolt 1.5.6 Boltcms Bolt 1.6.0 Boltcms Bolt 1.6.2 Boltcms Bolt 1.6.3 Boltcms Bolt 1.6.3.1 Boltcms Bolt 1.6.9 Boltcms Bolt 2.0.0 Boltcms Bolt 2.0.1 Boltcms Bolt 2.0.2 Boltcms Bolt 2.0.3 Boltcms Bolt 2.0.4 Boltcms Bolt 2.0.5 Boltcms Bolt 2.0.6 Boltcms Bolt 2.1.0 Boltcms Bolt 2.1.1 Boltcms Bolt 2.1.2 Boltcms Bolt 2.1.3 Boltcms Bolt 2.1.4 Boltcms Bolt 2.1.5 Boltcms Bolt 2.1.6 Boltcms Bolt 2.1.7 Boltcms Bolt 2.1.8 Boltcms Bolt 2.1.9 Boltcms Bolt 2.2.0 Boltcms Bolt 2.2.1 Boltcms Bolt 2.2.2 Boltcms Bolt 2.2.3 Boltcms Bolt 2.2.4 Boltcms Bolt 2.2.5 Boltcms Bolt 2.2.6 Boltcms Bolt 2.2.7 Boltcms Bolt 2.2.8 Boltcms Bolt 2.2.9 Boltcms Bolt 2.2.10 Boltcms Bolt 2.2.11 Boltcms Bolt 2.2.13 Boltcms Bolt 2.2.14 Boltcms Bolt 2.2.15 Boltcms Bolt 2.2.16 Boltcms Bolt 2.2.17 Boltcms Bolt 2.2.18 Boltcms Bolt 2.2.19 Boltcms Bolt 2.2.20 Boltcms Bolt 2.2.21 Boltcms Bolt 2.2.22 Boltcms Bolt 2.2.23 Boltcms Bolt 2.2.24 Boltcms Bolt 2.2.25 Boltcms Bolt 3.0.0 Boltcms Bolt 3.0.1 Boltcms Bolt 3.0.2 Boltcms Bolt 3.0.3 Boltcms Bolt 3.0.4 Boltcms Bolt 3.0.5 Boltcms Bolt 3.0.6 Boltcms Bolt 3.0.7 Boltcms Bolt 3.0.8 Boltcms Bolt 3.0.9 Boltcms Bolt 3.0.10 Boltcms Bolt 3.0.11 Boltcms Bolt 3.0.12 Boltcms Bolt 3.1.0 Boltcms Bolt 3.1.1 Boltcms Bolt 3.1.2 Boltcms Bolt 3.1.3 Boltcms Bolt 3.1.4 Boltcms Bolt 3.1.5 Boltcms Bolt 3.1.6 Boltcms Bolt 3.2.0 Boltcms Bolt 3.2.1 Boltcms Bolt 3.2.2 Boltcms Bolt 3.2.3 Boltcms Bolt 3.2.4 Boltcms Bolt 3.2.5 Boltcms Bolt 3.2.6 Boltcms Bolt 3.2.7 Boltcms Bolt 3.2.8 Boltcms Bolt 3.2.9 Boltcms Bolt 3.2.10 Boltcms Bolt 3.2.11 Boltcms Bolt 3.2.12 Boltcms Bolt 3.2.13 Boltcms Bolt 3.2.14 Boltcms Bolt 3.2.15 Boltcms Bolt 3.2.16 Boltcms Bolt 3.2.17 Boltcms Bolt 3.2.18 Boltcms Bolt 3.2.19 Boltcms Bolt 3.2.20 Boltcms Bolt 3.3.0 Boltcms Bolt 3.3.1 Boltcms Bolt 3.3.2 Boltcms Bolt 3.3.3 Boltcms Bolt 3.3.4 Boltcms Bolt 3.3.5 Boltcms Bolt 3.3.6 Boltcms Bolt 3.4.0 Boltcms Bolt 3.4.1 Boltcms Bolt 3.4.2 Boltcms Bolt 3.4.3 Boltcms Bolt 3.4.4 Boltcms Bolt 3.4.5 Boltcms Bolt 3.4.6 Boltcms Bolt 3.4.7 Boltcms Bolt 3.4.8 Boltcms Bolt 3.4.9 Boltcms Bolt 3.4.10 Boltcms Bolt 3.4.11 Boltcms Bolt 3.5.0 Boltcms Bolt 3.5.1 Boltcms Bolt 3.5.2 Boltcms Bolt 3.5.3 Boltcms Bolt 3.5.4 Boltcms Bolt 3.5.5 Boltcms Bolt 3.5.6 Boltcms Bolt 3.5.7 Boltcms Bolt 3.6.0 Boltcms Bolt 3.6.1 Boltcms Bolt 3.6.2 Boltcms Bolt 3.6.3 Boltcms Bolt 3.6.4 Boltcms Bolt 3.6.5 Boltcms Bolt 3.6.6 Boltcms Bolt 3.6.7 Boltcms Bolt 3.6.8 Boltcms Bolt 3.6.9 Boltcms Bolt 3.6.10 Boltcms Bolt 3.6.11 Boltcms Bolt 3.7.0	155

Summary

Vulnerable Configurations

References