lutrasecurity/cve-2022-36532Proof of concept for CVE-2022-36532: RCE via File Upload in Bolt CMS 5.1.12 and below.
A vulnerability in Bolt CMS version 5.1.12 and below allows an authenticated user with the EDITOR_ROLE to achieve remote code execution. This vulnerability can be detected using this script, for details on the vulnerability see https://lutrasecurity.com/en/articles/cve-2022-36532/.
Three parameters are needed to run the script: The username, the corresponding password and the Bolt CMS instance URL.
To test an instance at http://127.0.0.1:8000/ with the credentials jsmith:password use the following command:
./CVE-2022-36532.py jsmith password "http://127.0.0.1:8000/"
For example:
