TI-2026-01491 CVE-2026-1813 · GHSA-2hmq-qjp7-8j88
bolo-blog bolo-solo FreeMarker Template PicUploadProcessor.java unrestricted upload
Priority MEDIUM 57
A vulnerability was found in bolo-blog bolo-solo up to 2.6.4.
Vulnerabilities
6 records
TI-2026-01490 CVE-2026-1812 · GHSA-7jwc-4rcq-547h
bolo-blog bolo-solo Filename BackupService.java importFromCnblogs path traversal
Priority MEDIUM 57
A vulnerability has been found in bolo-blog bolo-solo up to 2.6.4.
TI-2026-01489 CVE-2026-1811 · GHSA-gp3h-2r32-mm93
bolo-blog bolo-solo Filename BackupService.java importFromMarkdown path traversal
Priority MEDIUM 57
A flaw has been found in bolo-blog bolo-solo up to 2.6.4.
TI-2026-01488 CVE-2026-1810 · GHSA-8gmc-c3g8-vc4p
bolo-blog bolo-solo ZIP File BackupService.java unpackFilteredZip path traversal
Priority MEDIUM 57
A vulnerability was detected in bolo-blog bolo-solo up to 2.6.4.
TI-2026-01374 CVE-2026-1691 · GHSA-g4hj-43hm-xfc7
bolo-solo SnakeYAML BackupService.java importMarkdownsSync deserialization
Priority MEDIUM 57
A vulnerability has been found in bolo-solo up to 2.6.4.
TI-2023-21647 CVE-2023-41009 · GHSA-h9w3-rpx7-pwpc
File Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to execute…
Priority HIGH 82
File Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to execute arbitrary code via a crafted script to the authorization field in the header.