CVE-2020-4040 CSRF issue on preview pages in Bolt CMS
Unauthorized users can generate content previews in Bolt CMS due to missing CSRF protection, bypassing intended role restrictions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-4040?
CVE-2020-4040 is a high-severity vulnerability in bolt, published on 8 Jun 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Bolt CMS before version 3.7.1 lacked CSRF protection in the preview generating endpoint. Previews are intended to be generated by the admins, developers, chief-editors, and editors, who are authorized to create content in the application. But due to lack of proper CSRF protection, unauthorized users could generate a preview. This has been fixed in Bolt 3.7.1
Weakness: CWE-352
Which versions are affected by CVE-2020-4040?
2 open source packages ship an affected version, including bolt/bolt. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
bolt/bolt Packagist | All versions | 3.7.1 |
bolt/bolt Packagist | All versions | 3.7.1 |
Products include Boltcms Bolt.
How do I fix CVE-2020-4040?
Upgrade bolt/bolt to 3.7.1 or later.
Is CVE-2020-4040 being exploited?
There is no known exploitation of CVE-2020-4040 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in bolt
Sources
Also known as AZL-110318, GHSA-2q66-6cc3-6xm8.