Packagist/bolt/bolt CVE-2017-16754: medium 5.3, EPSS 1.77%
Bolt Improper Access Control
Action: Upgrade bolt/bolt to 3.3.6 or later.
composer require bolt/bolt:3.3.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.3.6 | - |
Fixed versions
| 3.3.6 |
Sources
- osv: GHSA-wr23-m9m2-jjf4
- https://nvd.nist.gov/vuln/detail/CVE-2017-16754
- https://github.com/bolt/bolt/commit/aa21787241945457a2e4abc8b079672935fe0840
- https://github.com/bolt/bolt
- https://github.com/bolt/bolt/releases/tag/v3.3.6
- http://www.securityfocus.com/bid/101777
CVE-2017-16754 · published · modified · JSON