File and Path Handling

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have…CVE-2019-9185Boltcms · 2.7% likely

   CWE-434

2. Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.CVE-2021-27367Boltcms · 1.8% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.