CVE-2022-31321

CriticalCVSS 9.1

Published: 01/08/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.73%

50th percentile - higher than 50% of all known CVEs

Summary

In Bolt 5.1.7, the foldername parameter has incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service (DoS) via crafted input.

Risk Assessment

The risk includes potential disclosure of server directory structure and possible application downtime due to DoS attacks, affecting data availability and confidentiality.

Recommendation

Immediately update Bolt to the latest version and implement additional server-side validation for the foldername parameter.

Original NVD description (English source)

The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service (DoS) via a crafted input.