CVE-2020-4040

Bolt CMS before version 3.7.1 lacked CSRF protection in the preview generating endpoint. Previews are intended to be generated by the admins, developers, chief-editors, and editors, who are authorized to create content in the application. But due to lack of proper CSRF protection, unauthorized users could generate a preview. This has been fixed in Bolt 3.7.1

• CWE-352
• CWE-352

• http://packetstormsecurity.com/files/158299/Bolt-CMS-3.7.0-XSS-CSRF-Shell-Upload.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2020/Jul/4Exploit, Mailing List, Third Party Advisory
• https://github.com/bolt/bolt/commit/b42cbfcf3e3108c46a80581216ba03ef449e419fPatch, Third Party Advisory
• https://github.com/bolt/bolt/pull/7853Patch, Third Party Advisory
• https://github.com/bolt/bolt/security/advisories/GHSA-2q66-6cc3-6xm8Patch, Third Party Advisory
• http://packetstormsecurity.com/files/158299/Bolt-CMS-3.7.0-XSS-CSRF-Shell-Upload.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2020/Jul/4Exploit, Mailing List, Third Party Advisory
• https://github.com/bolt/bolt/commit/b42cbfcf3e3108c46a80581216ba03ef449e419fPatch, Third Party Advisory
• https://github.com/bolt/bolt/pull/7853Patch, Third Party Advisory
• https://github.com/bolt/bolt/security/advisories/GHSA-2q66-6cc3-6xm8Patch, Third Party Advisory

Published

Jun 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-4032In FreeRDP before version 2.1.2, there is an integer casting…4.3
• CVE-2020-4033In FreeRDP before version 2.1.2, there is an out of bounds r…6.5
• CVE-2020-4035In WatermelonDB (NPM package "@nozbe/watermelondb") before v…5.9
• CVE-2020-4037In OAuth2 Proxy from version 5.1.1 and less than version 6.0…5.4
• CVE-2020-4038GraphQL Playground (graphql-playground-html NPM package) bef…7.4
• CVE-2020-4039SUSI.AI is an intelligent Open Source personal assistant. SU…9.1
• CVE-2020-4041In Bolt CMS before version 3.7.1, the filename of uploaded f…6.1
• CVE-2020-4042Bareos before version 19.2.8 and earlier allows a malicious …6.8
• CVE-2020-4043phpMussel from versions 1.0.0 and less than 1.6.0 has an uns…9.8
• CVE-2020-4044The xrdp-sesman service before version 0.9.13.1 can be crash…7.8
• CVE-2020-4045SSB-DB version 20.0.0 has an information disclosure vulnerab…7.5
• CVE-2020-4046In affected versions of WordPress, users with low privileges…5.4