BO
Product
Bolo-solo
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 0Low 0
Watch
Add Bolo-solo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-1813 | 9.8 | Feb 3 | bolo-blog bolo-solo FreeMarker Template PicUploadProcessor.java unrestricted upload Affected: through 2.6.4 |
| CVE-2026-1812 | 9.8 | Feb 3 | bolo-blog bolo-solo Filename BackupService.java importFromCnblogs path traversal Affected: through 2.6.4 |
| CVE-2023-41009 | 9.8 | Sep 5 | File Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to execute arbitrary code via a crafted script to the authorization field in the header Affected: 2.6 |
| CVE-2026-1811 | 8.8 | Feb 3 | bolo-blog bolo-solo Filename BackupService.java importFromMarkdown path traversal Affected: through 2.6.4 |
| CVE-2026-1810 | 8.8 | Feb 3 | bolo-blog bolo-solo ZIP File BackupService.java unpackFilteredZip path traversal Affected: through 2.6.4 |
| CVE-2026-1691 | 8.8 | Jan 30 | bolo-solo SnakeYAML BackupService.java importMarkdownsSync deserialization Affected: through 2.6.4 |
Showing 6
